Registry key location for security updates and patches

Question

In my application, I want to request security updates and fixes on a Windows window. To do this, I requested HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall Everything went well on the OS, except for Windows Server 2008 and Windows 7 ...

When you run appwiz.cpl on a Windows 2008 server machine, the number of patches and updates for the security system is displayed, but they are not available for any of them in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall . Windows appears to have changed the registry location for Windows 2008 Server and Windows 7.

I need to request details of updates and security fixes.

Answer 1

Windows 7 introduced fixes that apply using .msu files (MSU == Microsoft System Update).

One way is to list the keys on HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages , and then check the (string) InstallClient for "WindowsUpdateAgent" .

Apparently, you can use the Windows Update Agent API to read it regardless of registry location.

Answer 2

The best location I have found for security and patches applied to the system is a list of WMI QFE objects (WMIC QFE GET). This turned out to be accurate on all 6.x and later operating systems (Vista, W2008, Win7). W2003 also provides QFE, but entries are duplicated in the standard uninstall list.