Client Management Suite

 View Only
Expand all | Collapse all

Full OS Version with Patch level report

  • 1.  Full OS Version with Patch level report

    Posted Nov 02, 2021 02:46 PM
    I've been tasked to find the full OS build version in our environment by our security team. I can get to the Build number but can't find the patch level, like 17763.1935, I can't find the 1935 part.


    Any assistance would be appreciated.

    Greg


  • 2.  RE: Full OS Version with Patch level report

    Broadcom Employee
    Posted Nov 02, 2021 09:37 PM

    Hi GregST!

    You can use this example sql query how to get full OS build number and how to decode this value (Note that this can be done starting from 8.6 RU1 release where you should have SMP 8.6 RU1 and SMA 8.6 RU1 on client computer which sent own basic inventory)

    https://knowledge.broadcom.com/external/article/226615/

    Here is a mention about this in 8.6 RU1:

    https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/it-management-suite/ITMS/Release-Notes/IT-Management-Suite-86-RU1-Release-Notes/Whats-New-in-This-Release-ITMS-86-RU1.html

    Full operating system version and full operating system build number of the clients.
    The AeX AC Identificationpage in Resource Manager now shows full operating system version and full operating system build number. You can also add this data to your customized reports.
    Best regards,
    IP.

    ------------------------------
    [JobTitle]
    [CompanyName]
    [State]
    ------------------------------



  • 3.  RE: Full OS Version with Patch level report

    Posted Nov 03, 2021 07:51 AM
    This works. Thank you


  • 4.  RE: Full OS Version with Patch level report

    Broadcom Employee
    Posted Nov 03, 2021 03:01 AM

    If your environment isn't yet 8.6 RU1 version, then you could try to use a custom inventory.

    Here is created example to get "Update Build Revision" number from managed Windows client computers using custom inventory data class, powershell task and custom report to see "Update Build Revision" number from custom inventoried windows computers.


    Client task gets UBR (Update Build Revision) value from Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\


    Download attached .xml files and then import them one by one

    1. Import "Win Update Build Revision.xml" custom data class

    2. Import "Update Build Revision_ number only from custom inventoried Windows computers.xml" custom report

    3. Import "Get _Update Build Revision_ from Windows computers for custom data class _Inv_Win_Update_Build_Revision_.xml" custom task

    Schedule imported custom task for windows clients, after this check custom imported report in step #2 above

    Thanks,
    IP.



    ------------------------------
    [JobTitle]
    [CompanyName]
    [State]
    ------------------------------



  • 5.  RE: Full OS Version with Patch level report

    Posted Feb 26, 2024 08:30 AM

    Hello Igor,

    We still must use his recommendation, or do the last ITMS versions offer this result without using a custom class?

    Kind regards,



    ------------------------------
    Jose Roberto Costa
    Europe Consultant | Consulting and Strategy
    mobile: +351 937971122
    jose.roberto@orbitextreme.com | orbitextreme.com
    ------------------------------



  • 6.  RE: Full OS Version with Patch level report

    Broadcom Partner
    Posted Feb 26, 2024 08:40 AM

    Hi Jose Roberto,

    It depends on the ITMS Version:

    Take a look at this KB: https://knowledge.broadcom.com/external/article?articleNumber=231798

    Kind Regards,

    Johannes




  • 7.  RE: Full OS Version with Patch level report

    Posted Feb 26, 2024 09:42 AM

    Thanks Johannes Bedrech!

    It was precisely what I was looking for!

    Kind regards



    ------------------------------
    Jose Roberto Costa
    Europe Consultant | Consulting and Strategy
    mobile: +351 937971122
    jose.roberto@orbitextreme.com | orbitextreme.com
    ------------------------------



  • 8.  RE: Full OS Version with Patch level report

    Broadcom Employee
    Posted Feb 26, 2024 09:21 AM

    Hello Jose Roberto!

    1. If ITMS version is 8.6 RU1 or higher, then this information will be available in AeX AC Identification data class.
    2. Johannes Bedrech already provided answer for this question, if your environment is ITMS 8.6 RU1 or higher version.

    Best regards,
    IP.




  • 9.  RE: Full OS Version with Patch level report

    Posted Feb 26, 2024 09:45 AM

    Yep!

    Less one custom data class :)

    Kind regards



    ------------------------------
    Jose Roberto Costa
    Europe Consultant | Consulting and Strategy
    mobile: +351 937971122
    jose.roberto@orbitextreme.com | orbitextreme.com
    ------------------------------



  • 10.  RE: Full OS Version with Patch level report

    Broadcom Partner
    Posted Nov 03, 2021 09:12 AM
    Hi GregST,

    Here is another example very similar to Igor´s custom inventory...

    https://community.broadcom.com/groups/communities/community-home/digestviewer/viewthread?MessageKey=bd3e3bdb-d212-4f65-bf32-1733fb1a86aa&CommunityKey=2eae875e-f73e-4358-8452-7bb8f7f27f59&tab=digestviewer#bmbd3e3bdb-d212-4f65-bf32-1733fb1a86aa

    Network23