Create a Collection of machines missing a single patch MS07-042

Question

Good Morning All,
   I am trying to create a collection for all machines missing a single patch.  MS07-042.  This patch has multiple KB numbers. 
I noticed a couple of odd occurances.
1) Console query builder does not expose the Updates classes.
2) Console query builder does expose all the ITMU classes.  I am not sure if these are populated with the WSUS information gathered by the WUA.
I did create the following query
select * 
from  SMS_R_System inner join SMS_UpdateComplianceStatus on SMS_UpdateComplianceStatus.MachineID = SMS_R_System.ResourceId
   inner join SMS_Softwareupdate on  SMS_Softwareupdate.CI_ID = SMS_UpdateComplianceStatus.CI_ID
where SMS_Softwareupdate.BulletinID = "MS07-042"
However, I am unable to locate any documentation on what the Status Fields indicate in SMS_UpdateComplianceStatus.
My Questions
1) Is there an easier way to do this?
2) Is there any documentation on what the fields mean in SQL?
I look forward to blogging about this as soon as I am sure of an answer.
Best
Shaun Cassells
http://myitforum.com/cs2/blogs/scassells/default.aspx

Answer 1

Torsten, do you have a refrence for the SMS_UpdateComplianceStatus table?  I want to know what the Status Field values represent.
I realize this is an old thread, but I just wanted to put in my $0.02 in case someone else stumbles upon it looking for info.
So, the SMS_UpdateComplianceStatus class (cuz we're talking collections here, which is WQL and pulls from WMI classes) is really the equivalent of the v_UpdateComplianceStatus view.  So if you want to see what's in that, go to SQL and query it.
Also, if you want to know what the Status field values are, you can find those by looking at the v_StateNames view from SQL too where TopicType = 400 I believe.
State 0 = Unknown
State 1 = Not Required (meaning doesn't have patch and doesn't need it)
State 2 = Not Detected (meaning it doesn't have patch but needs it)
State 3 = Detected (meaning it has this patch)
So, if you want to create a collection of machines that are missing a patch, you could do something like this:
SELECT
  SMS_R_SYSTEM.ResourceID,
  SMS_R_SYSTEM.ResourceType,
  SMS_R_SYSTEM.Name,
  SMS_R_SYSTEM.SMSUniqueIdentifier,
  SMS_R_SYSTEM.ResourceDomainORWorkgroup,
  SMS_R_SYSTEM.Client
FROM
  SMS_R_System
  JOIN SMS_UpdateComplianceStatus
    ON SMS_R_System.ResourceID = SMS_UpdateComplianceStatus.MachineID
    AND SMS_UpdateComplianceStatus.Status = 2
  JOIN SMS_SoftwareUpdate
    ON SMS_UpdateComplianceStatus.CI_ID = SMS_SoftwareUpdate.CI_ID
    AND SMS_SoftwareUpdate.ArticleID = 832671
Number2 - (John Nelson)
Microsoft MVP (2009) - System Center Configuration Manager
http://number2blog.com