Compliance Report inaccurate

[firstcom]

Hello!

 

We have more than 500 desktops currently in our enterprise. Of those, about 3% are being reported as out-of-compliance when they're not. The compliance report, for example, will list patches that are already installed (I've even tried to download them directly from MS again and it states they're installed) or that simply do not apply - for example, .NET 3.5 patches are being marked as required when we're on 4.x with no 3.5 .NETs installed anywhere on the system.

 

The PCs in question have been marked as out of compliance for a couple weeks now, so it's getting annoying.

 

Has anyone run into this before, and know how to get everything synced?

 

Thank you!

[GarthMJ]

So there can be a couple or reason for this.

 

1. Force WUA to preform a full scan again and therefore it will provide CM12 with and updated list of SU that are installed and required.

2. You are comparing apples to oranges with respects to which SU should be already been applied. You would be surprised how often this happens. Particularly with Net / office updates.

[firstcom]

Hi Garth!

 

For #1, how do you force WUA to perform a full scan?

For #2, can you clarify?

 

 

 

So there can be a couple or reason for this.

 

1. Force WUA to preform a full scan again and therefore it will provide CM12 with and updated list of SU that are installed and required.

2. You are comparing apples to oranges with respects to which SU should be already been applied. You would be surprised how often this happens. Particularly with Net / office updates.

[GarthMJ]

Use the command: wuauclt /detectnow to force WUA to scan for SU.