Patch Management Solution

Hello, when I navigate to Reports\Software\Patch Management\Diagnostics there is a report titled Windows System Assessment Scan Summary.  When I open this report, the description states "Shows when system assessment scan results were last reported by each computer managed by this server.".  The name of the report and its description seem to indicate that this report can be used to determine the last time the Windows System Assessment Scan ran and reported up.  However, I've seen several machines where the events in Resource Manager\Events\Data Classes\Computer Events\AexSWDExecution show that machines haven't run a Windows System Assessment Scan in over a week.  Yet the Windows System Assessment Scan Summary report for the same machines produces a last inventory received date of within the last day or two.  Why does this occur?  Is it expected behavior?  If so, is there another report that provides the date of the actual scan maybe that is based off of the AexSWDExecution table?  Thanks.

Hi mconyers,

As far as I see it in ITMS 7.6 release, "Windows System Assessment Scan Summary" report uses stored procedure "spPMWindows_VulnerabilityAnalysisSummary" which queries these tables, views:

• Inv_AeX_AC_Identification
• CollectionMembership
• fnGetTrusteeScopedResourcesByScope
• vPMCore_GetAllRetiredMachines
• vComputerResourceEx
• ResourceUpdateSummary

According to quick checks, I see that "Last Inventory Received" column doesn't change date time after "Windows Assesment" scan execution on managed client in case if there were no new updates installed.

If managed client has new updates installed (or uninstalled old), then after "Windows Assesment" scan execution, "Last Inventory Received" field date time will be updated per this client.

Otherwise, this report shows when each managed endpoint has sent modified/changed inventory about installed patch updates.

Thanks,

IP.

Moving to Patch forum.