Tool or Service that lists all installed Windows Updates

Question

Hi,

im in search of a tool or a service that continuesly monitors the installed updates on my Windows 10 PCs and Servers....

Im using solarwinds RMM to monitor all those clients but the patchmanagement feature there is not able to display all the installed updates. Apparently it can only display the updates installed after a bigger Update (Featureupdate) ist installed.

Solarwinds told me that the bigger updates delete all previously installed updates (or lets say it just deletes the installed history)

What i want is simple:

A tool that records all installed updates on a windows machine. The log should be persitent and should not be overwritten when a bigger update comes thrugh.

I want to be able to look into that log and prove to my customes that the CVE patch was sucessfully installed; even if that patch was installed a long time ago...

Thank you

Answer 1

Hi BR0KK,

Thanks for your posting on this forum.

I have three way to achieve this feature:

• Open the PowerShell as an administrator and enter get-hotfix command to check the installed updates on the clients. Here is a screenshot in my environment for your reference:
  
• Use the Get-WsusUpdate command to get installed updates. Here is a link in detail for your reference:
  https://learn.microsoft.com/en-us/powershell/module/updateservices/get-wsusupdate?view=win10-ps
• Use the in-build WSUS report to filter out the installed updates. Referecne link:
  https://learn.microsoft.com/de-de/security-updates/windowsupdateservices/18127386

Please let me know if there are any feedback. Thanks for your time.

Regards,
Rita

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi thanks for the help.

I know about those but what i need is a Tool that persistently keeps a log of what is installed and that keeps this log even if one of MS featureupdates plows thrugh and deletes alls the previous entries.

Like the update history under Windows XP and 7 where you can see all the updates till way back....

Or maybe ... Is there a way to identify and confirm that windows 10 is up to date on patches with the buildnumber or revision?

Also i do not have WSUS installed anywhere. Im relying on Solarwinds RMM to do this job (and windows itself). Some of the clients are in non server enviroments...

I want to be able to print an update history for the time that a client is in my monitoring. Solarwinds RMM doesn't provide this. It can only display the currently installed Updates. After a feature update that list is reset and gone....

In that list i can search for the patch (KBXXX) to verify that Solarwinds RMM or MS has patched this ?

Answer 3

Hi BR0KK,

Thanks for your response.

In my opinion, there is no such tool to achieve this feature right now. And I'm not familiar with Solarwinds RMM. Perhaps we could try to get the support from the Product Manager.

Thanks for your understanding and cooperation.

Regards,
Rita

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 4

I found out that this Program: Loginvertory

can store a history of the scanned PCs. I'll try that out and report bach here if this is waht i want :)