asked
Patching Servers
Hello Folks, If a MS security Patch is applied for 50 servers, how can we make sure that they have been patched successfully. Is there a simple script which can be run and the info obtained. I know manual work is too much:-) Please help!! Syed_yp
I would check out codeplex for a powershell script to achieve this or use another Microsoft utility called WSUS to audit and report on OS Security patches. If you were only worried about SQL patches you could use a SQL Central Management Server. Since you are looking for OS level stuff it complicates things a bit however WMI calls should get what you need and powershell can do just that.
Use PowerShell remoting and just get the versions of the servers. It's all you have to do. I have a [blog post][1] on how to do remoting. Just get a TSQL script for getting the version (SELECT @@VERSION will work) and you're good. Assuming that doesn't work (because you're talkinga about 2000 servers and they don't have powershell for example), just use a list of servers and run the script against them one at a time. It's not as effective, but you can run it from one machine. [1]:
http://www.scarydba.com/2010/07/27/powershell-remoting-with-sql-server/
PowerShell remoting was added in PowerShell 2.0, 1.0 does not have it
Yep. @meltondba is right. You need to move to PowerShell 2.0. It's a million times better anyway. Start like I said, you have the powershell script for remoting. You have a tsql statement. Run that statement on your servers. If you can't remote, use a for loop against a list of servers. Search my blog. There are more examples of that type of thing there.
If you've got a SQL2008 installation of SSMS, try doing the following: * CTRL+ALT+G (or View->Registered Servers) * Right-click on Local Server group and create a new group * register your SQL2000 servers within that group * when done, right-click on the group and select "New Query" This will provide a standard T-SQL query window, with the added bonus of running that query against every machine in that group. (You'll see at the bottom of the window that it says "Connected 50/50" or similar.) So, as long as your query returns matching resultsets (ie same number of recordsets with the same definitions), then the resultsets will be merged and you'll see something like a normal recordset. So, for example, on my laptop I have a SQL2005 and a SQL 2008R2 instance. I run the following query against the group: sp_server_info 500 and I get the following records returned: .\sql2008r2 500 SYS_SPROC_VERSION 10.50.1600 .\sql2005 500 SYS_SPROC_VERSION 9.00.5000
Thomas thanks so much for this shortcut. I created a grp and registered all my SQL 2005 Instances, but can't fid new-->query at the grp level, but however at every individual server i can do a new query and run sp_server_info or Select@@version. But not able to et results like you have mentioned. Anyways I will keep on exploring, but this is of great help. Thanks, May God Bless You!!
