On April 12, 2005, Microsoft released the Extended Security Update Inventory Tool. This tool helps detect and deploy Microsoft Systems Management Server (SMS) security updates that the Microsoft Baseline Security Analyzer (MBSA) does not support. These security updates affect several products. MBSA is included in the SMS 2003 Software Update Scanning Tools download. MBSA is also included in the Microsoft Systems Management Server 2.0 Software Update Services (SUS) Feature Pack. For more information about a tool that you can use to deploy these security updates in a non-SMS environment, click the following article number to view the article in the Microsoft Knowledge Base: For more information about Microsoft security updates, visit the following Microsoft Web site:

Back to the top

SMS 2003 and the SMS 2.0 SUS Feature Pack use MBSA 1.2 and the Microsoft Office Inventory Tool to detect security updates on SMS client computers. The SMS hardware inventory process returns security update information to the SMS site server. Then, SMS administrators can use the Distribute Software Updates Wizard (DSUW) to deploy critical updates. The DSUW is included in SMS 2003 and in the SMS 2.0 SUS Feature Pack.

Because of limitations in the products that MBSA 1.2 supports, SMS 2003 and the SMS 2.0 SUS Feature Pack cannot detect all the security updates that are released. Therefore, Microsoft has released the Extended Security Update Inventory Tool to help SMS 2003 and SMS 2.0 administrators detect security updates that MBSA does not detect. This tool also helps deploy these updates by using the DSUW. At the time this article was written, the following security updates were included in the Extended Security Update Inventory Tool:

•	833987 (MS04-028)
•	887219 (MS05-004)
•	887981 (MS05-006)
•	890261 (MS05-009)
•	896597 (MS05-022)
•	904706 (MS05-050)

You can detect security updates that are not mentioned in this article by using the scanning tools that SMS and MBSA offer.

Back to the top

Download information

To download the Extended Security Update Inventory Tool, visit the following Microsoft Web site:The download package includes a document that describes how to install the tool.

Note The SMS Extended Security Update Inventory Tool Setup program may not work correctly on an SMS 2.0 server that is running Windows NT 4.0 with Service Pack 6a (SP6a). If the Setup program does not succeed, see the advanced installation steps in the user guide that is included with the inventory tool download package.

Important Before you install the Extended Security Update Inventory Tool, make sure that the latest versions of the software update scanning tools for SMS are installed.

•	To download the latest software update scanning tools for SMS 2003, visit the following Microsoft Web site: http://technet.microsoft.com/en-us/sms/bb676786.aspx (http://technet.microsoft.com/en-us/sms/bb676786.aspx) Note You do not have to have SMS 2003 Service Pack 1 installed to install the updated scanning tools.
•	To obtain latest software update scanning tools for SMS 2.0, download the SMS 2.0 Software Update Services Feature Pack. To do this, visit the following Microsoft Web site: http://technet.microsoft.com/en-us/sms/bb676802.aspx (http://technet.microsoft.com/en-us/sms/bb676802.aspx)

Back to the top

For more information about how to obtain and use the Enterprise Update Scanning Tool for non-SMS deployments, click the following article number to view the article in the Microsoft Knowledge Base:

Back to the top