MS Stack Audit

Servicing Stack Updates are updates made to the tools Windows uses to update your machine. Historically, these updates are not very common though we have seen four updates in a row between December 2018 and May 2019. This script is updates when new SSU updates are released.

It is very important that you install the latest servicing stack updates otherwise Kaseya (or any RMM using WUA) may not properly identify that your machine needs to be patched. It will show the machine being up to date, but it is not.

Learn more about Servicing Stack Updates here: https://docs.microsoft.com/en-us/windows/deployment/update/servicing-stack-updates

This script does a wmic lookup to determine if the proper KB is installed.

The list by OS can be found here: https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001. Will write result to the procedure log and send an email if patch is missing. Can report using $KBaudit$ and $OOD$.

View the following video for how to build a report from this audit (just change out the tags for $KBaudit$ and $OOD$):