Sorry for harping on this issue like a broken record but I’m finishing up the new server and just wanted to point out a few things:
Windows update may say I’m patched:
But Shavlik ‘s HfnetchkPro disagrees:
In fact we’re missing 3 service packs and 8 security updates:
We’re not done yet!
But even then, we need a bit more patches found on our download page:
The post Exchange sp1 fix up and our ASP.net mitigation to name just a few
So, err, is there any Microsoft-approved way of making sure our SBS boxes are all patched and up-to-date?
At the moment i’m using Windows Update + Baseline Security Analyzer.
MBSA misses ISA Server. At this time Windows Update Services [WUS] is still in beta but the intent is that it will patch all parts of our boxes.