Lansweeper’s audit report for the Microsoft April 2021 Patch Tuesday report provides a color-coded overview of all Windows computers and their Windows patch status. Scan your network with our report to give you a quick and easy overview that allows you to find devices that might have issues receiving Microsoft updates. Detect outdated machines, start updating or simply manage your updating process in your network. Run our audit to keep your devices safe.
In this Patch Tuesday of April 2021, Microsoft has fixed 101 vulnerabilities. The patch includes four more fixes related to the Microsoft Exchange server vulnerabilities from last month. Read about all the changes in our Patch Tuesday, April 2021 blog post.
Check which of your machines are out of date with the audit below.
Patch Tuesday April 2021 Audit Query
Select Distinct Top 1000000 Coalesce(tsysOS.Image,
tsysAssetTypes.AssetTypeIcon10) As icon,
tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tblState.Statename As State,
Case
When tsysOS.OSname = 'Win 2008' And SubQuery1.PatchIDMax >= 5001332 Then
'Up to date'
When tsysOS.OSname = 'Win 7' And SubQuery1.PatchIDMax >= 5001335 Then
'Up to date'
When tsysOS.OSname = 'Win 7 RC' And SubQuery1.PatchIDMax >= 5001335 Then
'Up to date'
When tsysOS.OSname = 'Win 2008 R2' And SubQuery1.PatchIDMax >= 5001335 Then
'Up to date'
When tsysOS.OSname = 'Win 2012' And SubQuery1.PatchIDMax >= 5001383 Then
'Up to date'
When tsysOS.OSname = 'Win 8' And SubQuery1.PatchIDMax >= 5001383 Then
'Up to date'
When tsysOS.OSname = 'Win 8.1' And SubQuery1.PatchIDMax >= 5001382
Then 'Up to date'
When tsysOS.OSname = 'Win 2012 R2' And SubQuery1.PatchIDMax >= 5001382 Then
'Up to date'
When tsysOS.OScode Like '10.0.10240' And SubQuery1.PatchIDMax >= 5001340
Then 'Up to date'
When tsysOS.OScode Like '10.0.14393' And SubQuery1.PatchIDMax >= 5001347
Then 'Up to date'
When tsysOS.OSname = 'Win 2016' And SubQuery1.PatchIDMax >= 5001347 Then
'Up to date'
When tsysOS.OScode Like '10.0.17134' And SubQuery1.PatchIDMax >= 5001339
Then 'Up to date'
When tsysOS.OScode Like '10.0.17763' And SubQuery1.PatchIDMax >= 5001342
Then 'Up to date'
When tsysOS.OSname = 'Win 2019' And SubQuery1.PatchIDMax >= 5001342 Then
'Up to date'
When tsysOS.OScode Like '10.0.18363' And SubQuery1.PatchIDMax >= 5001337
Then 'Up to date'
When tsysOS.OScode Like '10.0.19041' And SubQuery1.PatchIDMax >= 5001330
Then 'Up to date'
When tsysOS.OScode Like '10.0.19042' And SubQuery1.PatchIDMax >= 5001330
Then 'Up to date'
Else 'Out of date'
End As [Patch status],
Case
When tblComputersystem.Domainrole > 1 Then 'Server'
Else 'Workstation'
End As [Workstation/Server],
tblAssets.Username,
tblAssets.Userdomain,
tblAssets.IPAddress,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.SP,
Case
When tsysOS.OScode Like '10.0.10240%' Then '1507'
When tsysOS.OScode Like '10.0.10586%' Then '1511'
When tsysOS.OScode Like '10.0.14393%' Then '1607'
When tsysOS.OScode Like '10.0.15063%' Then '1703'
When tsysOS.OScode Like '10.0.16299%' Then '1709'
When tsysOS.OScode Like '10.0.17134%' Then '1803'
When tsysOS.OScode Like '10.0.17763%' Then '1809'
When tsysOS.OScode Like '10.0.18362%' Then '1903'
When tsysOS.OScode Like '10.0.18363%' Then '1909'
When tsysOS.OScode Like '10.0.19041%' Then '2004'
When tsysOS.OScode Like '10.0.19042%' Then '20H2'
End As Version,
tblAssets.Lastseen,
tblAssets.Lasttried,
Case
When tblErrors.ErrorText Is Not Null Or
tblErrors.ErrorText != '' Then
'Scanning Error: ' + tsysasseterrortypes.ErrorMsg
Else ''
End As ScanningErrors,
SubQuery1.PatchIDMax As [Latest Patch Scanned],
Case
When tsysOS.OSname = 'Win 2008' And SubQuery1.PatchIDMax >= 5001332 Then ''
When tsysOS.OSname = 'Win 7' And SubQuery1.PatchIDMax >= 5001335 Then ''
When tsysOS.OSname = 'Win 7 RC' And SubQuery1.PatchIDMax >= 5001335 Then ''
When tsysOS.OSname = 'Win 2008 R2' And SubQuery1.PatchIDMax >= 5001335 Then
''
When tsysOS.OSname = 'Win 2012' And SubQuery1.PatchIDMax >= 5001383 Then ''
When tsysOS.OSname = 'Win 8' And SubQuery1.PatchIDMax >= 5001383 Then ''
When tsysOS.OSname = 'Win 8.1' And SubQuery1.PatchIDMax >= 5001382 Then ''
When tsysOS.OSname = 'Win 2012 R2' And SubQuery1.PatchIDMax >= 5001382 Then
''
When tsysOS.OScode Like '10.0.10240' And SubQuery1.PatchIDMax >= 5001340
Then ''
When tsysOS.OScode Like '10.0.10586' Then
'EOL, update to a higher Windows version'
When tsysOS.OScode Like '10.0.14393' And SubQuery1.PatchIDMax >= 5001347
Then ''
When tsysOS.OSname = 'Win 2016' And SubQuery1.PatchIDMax >= 5001347 Then ''
When tsysOS.OScode Like '10.0.15063' Then
'EOL, update to a higher Windows version'
When tsysOS.OScode Like '10.0.16299' Then
'EOL, update to a higher Windows version'
When tsysOS.OScode Like '10.0.17134' And SubQuery1.PatchIDMax >= 5001339
Then ''
When tsysOS.OScode Like '10.0.17763' And SubQuery1.PatchIDMax >= 5001342
Then ''
When tsysOS.OSname = 'Win 2019' And SubQuery1.PatchIDMax >= 5001342 Then ''
When tsysOS.OScode Like '10.0.18362' Then
'EOL, update to a higher Windows version'
When tsysOS.OScode Like '10.0.18363' And SubQuery1.PatchIDMax >= 5001337
Then ''
When tsysOS.OScode Like '10.0.19041' And SubQuery1.PatchIDMax >= 5001330
Then ''
When tsysOS.OScode Like '10.0.19042' And SubQuery1.PatchIDMax >= 5001330
Then ''
Else Case
When tsysOS.OSname = 'Win 2008' Then 'KB5001389 or KB5001332'
When tsysOS.OSname = 'Win 7' Or tsysOS.OSname = 'Win 7 RC' Or
tsysOS.OSname = 'Win 2008 R2' Then 'KB5001335 or KB5001392'
When tsysOS.OSname = 'Win 2012' Or
tsysOS.OSname = 'Win 8' Then 'KB5001387 or KB5001383'
When tsysOS.OSname = 'Win 8.1' Or
tsysOS.OSname = 'Win 2012 R2' Then 'KB5001382 or KB5001393'
When tsysOS.OScode Like '10.0.10240' Then 'KB5001340'
When tsysOS.OScode Like '10.0.14393' Or
tsysOS.OSname = 'Win 2016' Then 'KB5001347'
When tsysOS.OScode Like '10.0.17134' Then 'KB5001339'
When tsysOS.OScode Like '10.0.17763' Or
tsysOS.OSname = 'Win 2019' Then 'KB5001342'
When tsysOS.OScode Like '10.0.18363' Then 'KB5001337'
When tsysOS.OScode Like '10.0.19041' Then 'KB5001330'
When tsysOS.OScode Like '10.0.19042' Then 'KB5001330'
End
End As [Install one of these updates],
Convert(nvarchar,DateDiff(day, QuickFixLastScanned.QuickFixLastScanned,
GetDate())) + ' days ago' As WindowsUpdateInfoLastScanned,
Case
When Convert(nvarchar,DateDiff(day, QuickFixLastScanned.QuickFixLastScanned,
GetDate())) > 3 Then
'Windows update information may not be up to date. We recommend rescanning this machine.'
Else ''
End As Comment,
Case
When tsysOS.OSname = 'Win 2008' And SubQuery1.PatchIDMax >= 5001332 Then
'#d4f4be'
When tsysOS.OSname = 'Win 7' And SubQuery1.PatchIDMax >= 5001335 Then
'#d4f4be'
When tsysOS.OSname = 'Win 7 RC' And SubQuery1.PatchIDMax >= 5001335 Then
'#d4f4be'
When tsysOS.OSname = 'Win 2008 R2' And SubQuery1.PatchIDMax >= 5001335 Then
'#d4f4be'
When tsysOS.OSname = 'Win 2012' And SubQuery1.PatchIDMax >= 5001383 Then
'#d4f4be'
When tsysOS.OSname = 'Win 8' And SubQuery1.PatchIDMax >= 5001383 Then
'#d4f4be'
When tsysOS.OSname = 'Win 8.1' And SubQuery1.PatchIDMax >= 5001382
Then '#d4f4be'
When tsysOS.OSname = 'Win 2012 R2' And SubQuery1.PatchIDMax >= 5001382 Then
'#d4f4be'
When tsysOS.OScode Like '10.0.10240' And SubQuery1.PatchIDMax >= 5001340
Then '#d4f4be'
When tsysOS.OScode Like '10.0.14393' And SubQuery1.PatchIDMax >= 5001347
Then '#d4f4be'
When tsysOS.OSname = 'Win 2016' And SubQuery1.PatchIDMax >= 5001347 Then
'#d4f4be'
When tsysOS.OScode Like '10.0.17134' And SubQuery1.PatchIDMax >= 5001339
Then '#d4f4be'
When tsysOS.OScode Like '10.0.17763' And SubQuery1.PatchIDMax >= 5001342
Then '#d4f4be'
When tsysOS.OSname = 'Win 2019' And SubQuery1.PatchIDMax >= 5001342 Then
'#d4f4be'
When tsysOS.OScode Like '10.0.18363' And SubQuery1.PatchIDMax >= 5001337
Then '#d4f4be'
When tsysOS.OScode Like '10.0.19041' And SubQuery1.PatchIDMax >= 5001330
Then '#d4f4be'
When tsysOS.OScode Like '10.0.19042' And SubQuery1.PatchIDMax >= 5001330
Then '#d4f4be'
Else '#ffadad'
End As backgroundcolor
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tblOperatingsystem On tblOperatingsystem.AssetID =
tblAssets.AssetID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblComputersystem On tblAssets.AssetID = tblComputersystem.AssetID
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Left Join (Select Top 1000000 tblQuickFixEngineering.AssetID,
Max(Cast(Right(tblQuickFixEngineeringUni.HotFixID, 7) As bigint)) As
PatchIDMax
From tblQuickFixEngineering
Inner Join tblQuickFixEngineeringUni On tblQuickFixEngineeringUni.QFEID =
tblQuickFixEngineering.QFEID
Where Right(tblQuickFixEngineeringUni.HotFixID, 7) Not Like '%[^0-9]%' And
tblQuickFixEngineeringUni.HotFixID Not In ('KB5001567', 'KB5001649',
'KB5001567', 'KB5001648', 'KB5001566', 'KB5001638', 'KB5001568',
'KB5001634', 'KB5001565', 'KB5001633', 'KB5001631','KB5001640','KB5001641')
Group By tblQuickFixEngineering.AssetID) As SubQuery1 On tblAssets.AssetID =
SubQuery1.AssetID
Left Join tsysIPLocations On tblAssets.IPNumeric >= tsysIPLocations.StartIP
And tblAssets.IPNumeric <= tsysIPLocations.EndIP
Left Join (Select Distinct Top 1000000 TsysLastscan.AssetID As ID,
TsysLastscan.Lasttime As QuickFixLastScanned
From TsysWaittime
Inner Join TsysLastscan On TsysWaittime.CFGCode = TsysLastscan.CFGcode
Where TsysWaittime.CFGname = 'QUICKFIX') As QuickFixLastScanned On
tblAssets.AssetID = QuickFixLastScanned.ID
Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID,
Max(tblErrors.Teller) As ErrorID
From tblErrors
Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID =
ScanningError.ID
Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller
Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype =
tblErrors.ErrorType
Where tsysOS.OSname <> 'Win 2000 S' And tsysOS.OSname Not Like '%XP%' And
tsysOS.OSname Not Like '%2003%' And (Not tsysOS.OSname Like 'Win 7%'
Or Not tblAssets.SP = 0) And tblAssetCustom.State = 1 And
tsysAssetTypes.AssetTypename Like 'Windows%'
Order By tblAssets.Domain,
tblAssets.AssetName
