Ok, I've got my data coming in and the report setup, but what column do I need to key off of to get the MS patches that are not installed?
Well, that really depends on what report you've created and which columns you're using. My original suggestions was to start with the Computer Update Status report, in which case it would be a simple as filtering in the Report Viewer to suppress the entries for the updates already installed.
I've got the security bulletin set to is not empty and the not installed field set to > 0, but my results cannot be true.
I would suggest first determining the correct filters to use by using the Report Viewer, and then once you've determined that it's a simple matter to apply those filters to a report definition. Also, the "Not Installed" column is not the one you want to be using to filter the updates that are installed.
I've got some of the updates listed multiple times per server
This is flat out impossible, in a properly declared report definition, so we're probably going to have to look at what you're actually looking at to sort that out. If you could either paste a screen image or attach a PDF showing these "updates listed multiple times per server" we can work from that.
and some showing up under servers which I know has the update installed.
Which is entirely possible if the report declaration is not proper for what you're trying to retrieve and you're not actually reporting on updates that are Installed.
So let's start here:
- Run the Computer Update Status report.
- Open the filter dropdown for the Update Installation State (Friendly Name) column and uncheck the "Installed" value.
- Sort or group by the Computer Name column if you wish.
- Review the results.