Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm looking for a program that can remotely show me (From a server counsel) all the patch info and programs of the computers on my network. And whether it shows it to me via GUI or through a report, either would be helpful for me to see that all machines are running the same java patches, ect.

I tried googling around but couldn't find much.


share|improve this question

closed as not constructive by Sven, dunxd, Michael Hampton, mdpc, Ward Jan 19 '13 at 3:20

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

SCCM can do this. If you want comprehensive reports and don't want SCCM you'll have to use some other form of asset management like a SpiceWorks product, Microsoft Asset Management, etc.

If you just want Microsoft patches, you can use PowerShell's get-hotfix cmdlet.

share|improve this answer
Yeah, more or less, all I care about is Java patches at the moment, I've heard mention of spiceworks on other posts on this forum, I'll check it out. I'm looking for a program, that I can be like, "Oh hey, that machine is out of date/wrong version/ect" and go install the correct one. – Matt Jan 18 '13 at 19:39
@Matt It sounds like you want a configuration management application. Look at SCCM, it's the canonical answer to config management on Windows. It will, not only report on versions, but remediate systems that need it automatically based on policies that you define. – MDMarra Jan 18 '13 at 19:40
Oh wow, alright, I'll check it out thanks! – Matt Jan 18 '13 at 19:44
It'd be good to mention that SCCM isn't freely available. More information at:… – wullxz Jan 18 '13 at 20:13
He didn't. But since SCCM isn't available for just a few bucks, I find it worth mentioning. – wullxz Jan 18 '13 at 20:30

You can query installed software and their version using Powershell (which isn't preinstalled on server 2008 by default, but is very handy) or the wmic command (available on all windows machines).

Example for Powershell:

Get-WmiObject Win32_Product -Computername "computer1", "computer2", "computer3" -filter "name like 'java%'" | select __server, name, vendor, version

Example for wmic (run wmic in cmd.exe):

wmic /NODE: "computer1", "computer2", "computer3" product where "name like 'java%'" get name, vendor, version

(Sadly, I haven't found a solution yet, to display the target name using wmic like I did in Powershell with select __server..., but I will edit this as soon as I have a solution.)

I recommend using Powershell for this because you're more flexible with Powershell and you can, for example, use an xml file or a simple text file as source for target names. I can provide you with samples for that if you're interested (I have to write them first ;)).
Of course you can schedule a powershell script and let it, for example, write its results to a file or send an email.

share|improve this answer

If you are looking for open-source solutions, a really good combination is OCS-NG and GLPI.

OCS-NG is a client/server application that uses agents, installable on Windows and Linux, to collect information about the hardware and software installed on the system, including Microsoft patches, Java patches, product keys, and more. The agent then forwards the data to a central server to be viewed. OCS also had the opportunity to distribute packages of software back out to the clients, allowing you to automatically apply a new Java update on each client machine without visiting it.

GLPI is another web application which is an asset management/tracking tool with an integrated helpdesk feature. It also has a gateway interface with OCS-NG to import the data collected by the agents. This will automatically populate the appropriate fields and provide a much nicer interface for managing this data. GLPI also allows you to create connections between devices; I used it to model our network infrastructure here, so that I know the entire chain of connections from the PC to the switch:

PC -> Wall Jack -> Patch Panel port -> Switch Port

share|improve this answer

I like to use Spiceworks, Ninite, and WSUS together to manage things.

Spiceworks can give you the information you want while Ninite and WSUS can manage the updates. These are really nice when your budget is minimal. When you've got the budget for it the System Center Suite from Microsoft is what I prefer.

share|improve this answer

Microsoft Intune is easy and free to try:

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.