Job Management Partner 1/Client Security Control Description, User's Guide and Operator's Guide
JP1/Software Distribution links to MBSA or WUA to detect security updates that have not been applied to a client. This section describes the procedures for each product:
For details and precautions on detecting information about unapplied security updates, see the manual Job Management Partner 1/Software Distribution Administrator's Guide Volume 1, for Windows systems.
- Organization of this section
- (1) When JP1/Software Distribution links to MBSA
- (2) When JP1/Software Distribution links to WUA
(1) When JP1/Software Distribution links to MBSA
To detect security updates that have not been applied to a client, distribute to the client the MBSA command line interface (mbsacli.exe file) and MBSA database files, and then specify Search all software in JP1/Software Distribution, and execute the Get software information from the client job.
With JP1/Software Distribution, of the Security Updates scan results for which mbsacli.exe can be executed, information for which the latest security update was not found (displayed as Not Found in the scan results) is detected as security update information (unapplied patch information) not applied to the client. Note that Microsoft Office security updates are not covered by mbsacli.exe scans, and therefore such unapplied security update information cannot be detected.
To use MBSA to detect information about unapplied security updates, the client must satisfy all of the following conditions:
- The OS is Windows NT 4.0, Windows 2000, Windows XP, or Windows Server 2003.
- JP1/Software Distribution SubManager (version 07-50 or later) or JP1/Software Distribution Client (version 07-50 or later) is installed.
- Version 6.0 or later of Microsoft Internet Explorer is installed.
- The client has the MBSA 1.2.1 mbsacli.exe file, and the MBSA database files.
If the above conditions are not satisfied, an error will occur during execution of the Get software information from the client job.
Note that there are no OS or version limitations for systems relaying the Get software information from the client job.
(2) When JP1/Software Distribution links to WUA
To detect security updates that have not been applied to a client, perform a remote installation of WUA 2.0 and Windows Installer 3.0 on the client and distribute the WUA 2.0 database files to the client. Then, specify Search all software in JP1/Software Distribution and execute the Get software information from client job.
Information about security updates provided by Windows Update that have not been applied to a client is detected in JP1/Software Distribution as unapplied security update information (unapplied patch information). By linking to WUA you can detect unapplied patch information for software such as Microsoft Office as well as for the OS.
The client must satisfy all of the following conditions:
- The OS is Windows 7, Windows Server 2008, Windows Vista, Windows Server 2003, Windows XP, or Windows 2000.
- Version 6.0 or later of Microsoft Internet Explorer is installed.
- JP1/Software Distribution Client (version 08-00 or later) is installed.
- Version 3.0 or later of Windows Installer is installed.
- Version 2.0 or later of WUA is installed.
- The client has the WUA 2.0 database files.
If the above conditions are not satisfied, an error will occur during execution of the Get software information from the client job.
Note that there are no OS or version limitations for systems relaying the Get software information from the client job.
All Rights Reserved. Copyright (C) 2009, 2011, Hitachi, Ltd.
Copyright, patent, trademark, and other intellectual property rights related to the "TMEng.dll" file are owned exclusively by Trend Micro Incorporated