Greetings;
My test PC's are reporting they are missing critical patches through Microsoft Baseline Security Analyzer that my Altiris console lists as having the same patches installed. This may not be an issue with the system and may be more of a understanding deficiency on my part. Any advice on why this could be happening would be greatly appreciated as I need to be able to trust that what Altiris is telling me as patched... IS actually patched.
As an example, MS15-044 is one that MBSA says is needed on my windows 7, office 2007 test PC's. When I get details from MBSA, it states KB2883029 is missing. But when I run a Compliance by Computer report, and choose "view installed updates" on the target PC, I see that both KB3048070 and KB2881073 (both from MS15-044) are applied. No mention of KB2883029 being deployed to the machine, which makes sense so far. But when I check my policy, KB2883029 is indeed part of MS15-044 and is enabled to deploy. I don't understand why Altiris seems to have delivered only a partial set of patches for what the workstation needs (According to MBSA).
In addition, please let me mention MS15-011. Altiris reports that it's deployed to the same machine and references KB3000483. MSBA however, reports this as a missing critical update. To take it a step further, I ran "WMIC qfe" and exported the list to a text file. KB3000483 is listed there as installed by NT Authority. Which unfortunately just adds to my confusion.
What piece of the puzzle am I missing? Any advice would be greatly appreciated.
Thanks in advance for your time.
- Michael Babb