Hi - SCCM 2007 is not using MBSA for scanning, it's using Software Update Agent for the scanning. If you compare MBSA and SCCM patch compliance report then MBSA is provide us the most reliable report (always). Anybody else is having same issue? Any idea why are we not getting reliable report from SCCM as compared to MBSA? Anoop C Nair

SCCM is using the windows updates agent. What are you seeing in MBSA that you are not seeing in SCCM? John Marcum | http://myitforum.com/cs2/blogs/jmarcum/|

Hi, Only reason is that the results must be compared to two different catalogs.Kent Agerlund | My blogs: http://blog.coretech.dk/author/kea/ and http://scug.dk/ | Twitter @Agerlund | Linkedin: /kentagerlund

John - I was stating about the reliability of complacence report in SCCM and MBSA. e.g SCCM produces a compliance report that it got all the necessary patches are installed on a system and it's 100 % complaint. However when I ran MBSA then it produces another report that there are patches missing on that system and it's complaint. If you look at the system manually, yes there are patches missing in the system and that is why we feel like SCCM is not reliable as MBSA. I may agree with Kent. May be, that is reason for this difference. Is there any way to use same catalog for SCCM and MBSA? Anoop C Nair

No, it is not possible to use the same catalog for SCCM and MBSA. But SCCM, which syncs with Microsoft Update should provide matadata with all security updates that are provided by MBSA. Make sure you have selected required Products/Update Classifications in SCCM.Regards, Madan

Ok. I think, you are correct. As per MicroSoft MBSA supports only below categories of updates. For MBSA comparison, I don't need to enable all the products listed in Products/Update Classifications in SCCM. Q: What kinds of updates will MBSA support? But I would like to know the your experience of reliability of SCCM patch reports vs MBSA. Any comments!!!Anoop C Nair

Actually yes, you can scan using the same catalog a ConfigMgr. Open MBSA, select Scan a PC, Under options select Advanced Update Services options then Scan using assigned Windows Server Update Services(WSUS) servers only http://www.enhansoft.com/

Yes, thank you ..... But I would like to know the your experience of reliability of SCCM patch reports vs MBSA. Anoop C Nair

I don’t know anyone that use MBSA for Software Updates Reporting, for various reason. Mostly because it is a manual process and it is network intensive. What are you trying to achieve? What wrong the ConfigMgr Software Update reports? What are you seeing? http://www.enhansoft.com/

Hello Garth - As I mentioned in the above thread. "e.g SCCM produces a compliance report that it got all the necessary patches are installed on a system and it's 100 % complaint. However when I ran MBSA then it produces another report that there are patches missing on that system and it's complaint. If you look at the system manually, yes there are patches missing in the system and that is why we feel like SCCM is not reliable as MBSA.?"Anoop C Nair