HP 4320t Using Microsoft® Baseline Security Analyzer 2.2 and Windows& - Page 18

MBSACLI /xmlout /catalog c:\temp\wsusscn2.cab /unicode >results.xml MBSACLI /l /rd c:\scanreports Localizations MBSA releases are available for German, Japanese, and French. The WSUSSCN2.CAB file is localized to all supported languages and is automatically downloaded and used by the tool for any client language or locale being scanned. Results are stored in the report based on the MBSA installation language. Issues Problems discovered during the scoping of this project: • Microsoft is not supporting the Nobackup feature for WES 7 Security Updates. This is a crucial and impacting change, as the addition of monthly Security Updates expands the Image footprint from month to month. • The current catalog files must be downloaded from the Internet before an OFFline mode scan. It is strongly recommended that these files be downloaded on a weekly basis to ensure that the current security database is being used for scanning. • Installation history (explicitly installed/effectively installed) no longer reflects those updates that have been superseded by another update. The behavior of this feature follows the behavior for missing updates, where only the most recent non-superseded update is shown. • Workaround: Refer to the bulletin, fixlist, or TechNet search page to identify each previous bulletin that has been included in the update in question from the Current Update Compliance listing. Using Windows Update on WES 7 Introduction This section discusses the pros and cons of enabling Windows Update on HP Windows Embedded Standard 7 (WES 7) images. The section also covers the level of support Microsoft and HP have for Windows Update and what the customer can expect if Windows Update is enabled on HP thin clients. It concludes with some special notes regarding installing WES 7 QFEs with a write filter enabled. 18