Quick Tip: Get All The Security Patches Installed On A Server Since A Specific Date

Recently, I needed to get a list of all the security patches I’d installed on a group of servers in the last year. It turns out that there’s a WMI class for this and it’s super easy to retrieve this info.

In the win32_quickfixengineering class, you’ll find all the security patches installed on a system. One of the properties is the InstalledOn attribute which more recent than a year ago.

If you have a list of servers to do this for, this is still really easy.

Just paste them into a here-string and execute this for each of them.

0 thoughts on “Quick Tip: Get All The Security Patches Installed On A Server Since A Specific Date

  1. Tom are there any differences from Get-HotFix? When I do a get member against either they both return TypeName: System.Management.ManagementObject#rootcimv2Win32_QuickFixEngineering. Just curious. Getting ready to dive into your Re-ex Series on “Hey Scripting Guy”
    Look forward to reading your Articles! I’m just getting started on the Blogging part so excuse the lack of content.

    1. Hey Drew, I don’t think there’s much difference other than that Get-Hotfix returns all updates, not just security updates. Honestly, I haven’t done too much testing to see which is faster.

      I hope you like the Regex series!

Leave a Reply

Your email address will not be published. Required fields are marked *