I just ran an MBSA against our entire fleet of servers and found that a number of them appear to be missing quite a number of patches. We patch our fleet quite regularly so the results are quite surprising. Some of our reports are coming back with 100+ patches missing. We utilise SCCM primarily to identify and deploy the patches and this hasn't really picked up the same net results. Can anyone please explain to me how MBSA itself generates the information needed (i.e. the logic). Will MBSA for example see that patch 1234 was superseded by patch 5678 and only report on patch 5678 or is it not "clever" enough to distinguish between the 2?

Hi Draco3, Thank you for your post. I suggest you open a thread in MBSA forum: http://social.technet.microsoft.com/Forums/en-US/MBSA/threads If there are more inquiries on this issue, please feel free to let us know.Regards, Rick Tan