Home > Security Channel Project Guides > Patch Management Services > Post-Patch Deployment > Post-patch troubleshooting: Auditing revision levels
Project Guides: Patch Management Services:
EMAIL THIS
 START   SECURITY PATCH TESTING   DEPLOYMENT   POST-DEPLOYMENT   PRODUCTS   
Post-Patch Deployment

<< PREVIOUS | NEXT >>: Patch management system post-deployment...
 TIPS & NEWSLETTERS TOPICS 

PLATFORM SECURITY

Post-patch troubleshooting: Auditing revision levels


Serdar Yegulalp
10.19.2006
Rating: --- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


After deploying a patch or service pack on your customer's Windows systems, you may find that altered components are not working with the applications. You may need to audit your revision levels. This tip, reposted courtesy of SearchWindowsSecurity.com, offers four ways to determine the revision of a given component.

Patch Management Project Guide
Value-added resellers and security consultants can learn more best practices for offering patch management services in our Patch Management Project Guide.

Sometimes after adding a service pack or patch to a system, you're faced with the possibility that a component either wasn't upgraded correctly or was upgraded to the wrong revision. There are a number of ways to determine what the revision of a given component is, either on-disk or live in memory, but the effectiveness of the method you choose will depend on your exact needs. Here are your choices:

  1. In Explorer -- The most obvious way to determine the revision of a component is just to right-click on it in Explorer and select Properties | Version. Or, you can switch to the Details view in Explorer, and show the File Version and Product Version as columns. But, with this view, you can't easily export the results. Note that .DLLs will have a Version tab but .EXE files will not, so this limits its usefulness.
  2. Through Process Explorer -- The endlessly useful Process Explorer utility from Sysinternals lists the revision levels of all loaded components. If you click on the name of a process and select View | Lower Panel View | Show DLLs, you can see all of the loaded DLLs in use by that process as well as their revision levels. This is only useful for running processes, but the program supports exporting the information shown to a delimited text file. Note that it may take several seconds for the program to poll all the used .DLLs for a given process.
  3. Through an external resource -- This method is best if you want to find out what other revisions there might be for a process or component. For Microsoft components, Microsoft itself has a site called DLL Help. There you can look up any component from a Microsoft or Microsoft-supported product, see all of the tracked revisions for the component and learn more about each of them. However, DLL Help is only useful for Microsoft components, not third-party apps.
  4. Through a script -- This option is the most effective way to report back on a whole slew of components at once. For instance, use a script if you want to audit all of the items in a directory that represent what a patch will put into place and you want to see a quick side-by-side comparison of component revision information. One such script is available online at JSWare and, with a little work, it can be used to obtain the revision information for all files that match a wildcard or are in a directory.

About the author
Serdar Yegulalp is editor of the Windows Power Users Newsletter. Check it out for the latest advice and musings on the world of Windows network administrators -- and please share your thoughts as well!

This tip originally appeared on SearchWindowsSecurity.com.


Rate this Tip
To rate tips, you must be a member of SearchSecurityChannel.com.
Register now to start rating these tips. Log in if you are already a member.




Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


<< PREVIOUS | NEXT >>: Patch management system post-deployment...
VIEW ALL IN THIS CATEGORY


RELATED CONTENT
Post-Patch Deployment
Fixing patch mishaps in Windows
Patch management system post-deployment considerations for VARs and consultants

Platform Security
Channel Checklist: Windows Vista security
An introduction to penetration testing and its legal implications for VARs and consultants
Penetration testing reconnaissance -- Footprinting, scanning and enumerating
Network penetration testing: Ethical hacking tools and techniques
Penetration testing -- Securing wireless access points
Penetration testing -- Big bad bugs
Penetration testing -- Social engineering, IDS and honey pots
Windows security administration using command-line tools
Windows Vista BitLocker basics and advanced techniques
Microsoft Windows Vista firewall enhancements

Vulnerability and patch management
Mitigating zero-day vulnerabilities in customers' environments
Despite customer interest, channel struggles with threat management
Portcullis Systems adds HP security products to Microsoft customers
Agilex partners with HBGary to offer security forensic, assessment services
Snort vs. Microsoft Security Bulletin MS08-068
Top security tips for solutions providers
Top five security service provider tips of 2007
The true cost of offering patch management services
Microsoft WSUS deployment guide
Antivirus software patch management

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.

HomeNewsTopicsITKnowledge ExchangeTipsMultimediaWhite PapersBlogsEvents
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2006 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts