Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Why doesn MBSA provide reboot pending status for the latest updates?

April 26, 2017latest MBSA Reboot Status updates

0

Posted

Why doesn MBSA provide reboot pending status for the latest updates?

1 Answer

0

Posted

MBSA can only provide reboot pending status when the option to Check for Windows administrative vulnerabilities is selected in the GUI or by default if “/n Updates” is not added to the command-line utility (CLI) to suppress this feature. Reboot pending status is obtained directly from the Windows Update Agent (WUA) client on each target machine. As long as the security update was installed using a WUA-supported process (Windows Update, Microsoft Update, SMS w/ITMU, or WSUS Server), MBSA can report any required pending reboot. If an update has been installed manually or through a third-party installation process, MBSA is unable to report reboot pending state. For customers using the /xmlout option from the command-line utility, the pending reboot status is not available due to the limitation of using the /xmlout option. Workarounds may include running mbsacli.exe without any switches.