When using the Windows Security Update Server (WSUS) 3.0 and creating the
reports, how can one separate the installed machine count from the Not
Applicable count. It can be done within the patch window and computer
window, but I can't find where it can be done within the reports. This is
being done as to get an accurate security picture of the networks patch
management system by patch. Example:
MS07-0004
| affected | installed | needing patch | Not
Applicable | Total number | %
Corporate devices 28 26 2 12
40 95%
Division devices 68 58 10
22 90 89%
Branch devices 20 20 0 10
30 100%
Department devices 48 48 0 22
70 100%
TOTAL: 164 152 12
66 230 96%
Then it can be said that our overall Windows patch management level is at
96% for patch MS07-0004 and out of 230 devices 164 are affected by this
vulnerability. Once all of the patches are calculated then an overall patch
level could be determined.
We are limited in a simple calculation of how many devices are actually
affected because the installed and not applicable measures are grouped
together in the reports. Is there a way to separate these two metrics within
the report like it can be done in the menu prior to creating the report?
Thank you for your help.
MS,
If there is not a current way, can a way be added to a future version or
update for the WSUS
>> Stay informed about: Reports: Separating the installed and the Not Applicable s..