Dear All,
For my Organization - I am Process of finding the Windows Servers which is not compliant. Here are the following which I have done.
1. Created SUG which is having all Microsoft Security Updates for Windows Server 2012 (Not-Expired & Not-Superseded)
2. Deployed the Patches as per the SCCM Work Flow Deployment Procedure
3. Created CI & Compliance Baseline using (QuickFixEngineering) to find the list of updates using as WQL Query with requirements as Windows Server 2012
4. Few of the Updates got download and installed on Windows Server 2012, but still many of the updates are not showing as Deployed - Yes, Expired - No, Superseded - No with active deployment, but it is not showing in the Software Center.
5. Ran the Machine Policy, but still few of the Updates were missing/not installing. As a Result this Updates are showing as Required/Not Installed in the Compliance baseline reports.
Please drive me, If I do any mistakes here.
Note: Preferred to use the WQL Query only, as we are having issues with SQL Reportings
Regards,
Veera
Veera