AnsweredAssumed Answered

MS14-028  - False Positives or SCCM issues?

Question asked by Ross Laurie on May 16, 2014
Latest reply on May 28, 2014 by Cory Gwinn

We've patched our test/development environments,  and scanned them.  One patch appeared to be missing on almost all servers, MS14-028.  This is perplexing as the server teams maintain that iSCSI is not running or installed.   After digging around...

 

1) Checked for the Qualys indicator : HKCR\CLSID\{01E25EBF-9697-497E-A70D-6D9EE001DB64}\LocalServer32 is missing

  It is not present

2) iSCSI service is not running

3)Looked for ISCSI, in Administrator Tools -> iSCSI Initiator.  Option is there but not installed

 

Is the scan looking at all Win 2008 R2 boxes and assuming they need to be patched, or is SCCM not seeing something Qualys is?

 

 

Any suggestions?

 

Ross

Outcomes