What is the appropriate WMI query to ask a 2012 SCCM server for a list of missing Microsoft patches on a specific host that the SCCM server manages. For example, say I want to check which patches are missing on a Windows 8 client that is at IP 192.168.10.100. What WMI query could I use to ask the SCCM server which patches that host doesn't yet have installed?
SCCM Server 2012 WMI Query For Missing Microsoft Patches On Specific Host
patch-managementsccmwmi
Related Solutions
Yes, it should be possible, the IP address is complicated a bit by the fact that there may be more than one of them though. Check Microsoft's site for some very useful WMI browsers. Should work with Windows 2000, as long as the WMI service is running.
Also, the WMI Code Creator is very handy.
Perhaps the
REVsite code was used for a temporary test installation of SCCM 2012? Perhaps not. Institutional knowledge doesn't have any record of theREVit and the migration we performed before I was hired.
This hunch was correct. I got a hold of my predecessor and apparently the first and unsuccessful attempt to migrate from SCCM 2007 to SCCM 2010 used the REV site code. How it managed to sit dormant in WMI all this time and why it got "activated" is a complete mystery to me.
I very carefully re-read the solution in this TechNet post which advised deleting the old namespaces and decided to try that. I kind of hesitate to mark this as an answer even though it did resolve this issue, it indicates that I implicitly approve of it, especially since I couldn't get anyone "official" at Microsoft to confirm whether or not this was a safe approach or what the consequences were for doing this. That being said, make sure you have complete backups of your SCCM server or at least a much more intimate knowledge of WMI before proceeding. You could very easily break everything doing this, especially if like me, you're not familiar with WMI and how deeply SCCM leverages it.
I used wbemtest to connect to the root\sms namespace on our SCCM server. From there I used the [Enum_Instances...] button and search for __NAMESPACE as the superclass. I deleted the entry for the REV site code. I then did the same Enum_Instances for the SMS_ProviderLocation as the superclass and deleted the old site code from that namespace. Re-running the Automatic Deployment Rules and reviewing the PatchDownloader.log showed the successful downloading of each Windows Update.
I would greatly appreciate more information about how these namespaces are used by SCCM and exactly how this fixed the issue if anyone has more detailed information.
Best Answer
I'm unaware of a way to do that with WMI, but you can use the reporting functions of SCCM to get the same info.
Navigate to
\Monitoring\Overview\Reporting\Reports\Software Updates - A ComplianceLaunch theCompliance 5 -Specific Computerreport. Fill out the fields. Sort on theInstalledcolumn. Star(*) in the column means it has been installed, blankSpace in the column means its missing. For some reason they did not use True/False for column values.