Hi there, I am just wondering if anyone knows if Microsoft has released a scanning tool to confirm if kb870669 has been installed successfully yet on all network pc's? I am aware you can check add/remove programs but this is to be done remotely. Any help would be appreciated.

Regards

DOCNZ

Re: Scanning tool for KB870669? by Torgeir

Torgeir
Tue Jul 13 20:37:46 CDT 2004

docnz wrote:

> Hi there, I am just wondering if anyone knows if Microsoft has
> released a scanning tool to confirm if kb870669 has been installed
> successfully yet on all network pc's? I am aware you can check
> add/remove programs but this is to be done remotely.
Hi

No, Microsoft have not released a scanning tool for this, I doubt
that they ever will...

Anyway, to verify if the ADODB.Stream object is disabled for IE or not,
it is a simple registry read that you can do remotely.

Below is a vbscript as well as a batch file solution you can use as
a starting point:


VBScript:

'--------------------8<----------------------
Const HKLM = &H80000002

sComputer = "." ' use "." for local computer
Set oReg = GetObject("winmgmts:{impersonationLevel=impersonate}!\\" _
& sComputer & "\root\default:StdRegProv")

sRegKey = "SOFTWARE\Microsoft\Internet Explorer\" _
& "ActiveX Compatibility\{00000566-0000-0010-8000-00AA006D2EA4}"

sRegValue = "Compatibility Flags"

oReg.GetDWORDValue HKLM, sRegKey, sRegValue, iValueData

If iValueData = 1024 Then
WScript.Echo "KB870669 is installed"
Else
WScript.Echo "KB870669 is not installed"
End If
'--------------------8<----------------------



Batch file:

@echo off
set regvaluedata=
:: split regkey in two to avoid line wrap in newsreader
set regkey_part1=HKLM\SOFTWARE\Microsoft\Internet Explorer\
set regkey_part2=ActiveX Compatibility\{00000566-0000-0010-8000-00AA006D2EA4}
set regpath="\\%COMPUTERNAME%\%regkey_part1%%regkey_part2%"
set regvalue="Compatibility Flags"
:: line above for command (line might wrap)
for /f "Skip=4 Tokens=4" %%a in ('REG.EXE QUERY %regpath% /v %regvalue%') do
set regvaluedata=%%a
:: line under for command
If "%regvaluedata%"=="0x400" Goto KB870669Inst
Echo KB870669 is not installed on %COMPUTERNAME%
Goto End
:KB870669Inst
Echo KB870669 is installed on %COMPUTERNAME%
Goto End
:End
pause



--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/community/scriptcenter/default.mspx

Re: Scanning tool for KB870669? by docnz

docnz
Tue Jul 13 21:33:02 CDT 2004

Hey many thanks for that Torgier, most appreciated.

"Torgeir Bakken (MVP)" wrote:

> docnz wrote:
>
> > Hi there, I am just wondering if anyone knows if Microsoft has
> > released a scanning tool to confirm if kb870669 has been installed
> > successfully yet on all network pc's? I am aware you can check
> > add/remove programs but this is to be done remotely.
> Hi
>
> No, Microsoft have not released a scanning tool for this, I doubt
> that they ever will...
>
> Anyway, to verify if the ADODB.Stream object is disabled for IE or not,
> it is a simple registry read that you can do remotely.
>
> Below is a vbscript as well as a batch file solution you can use as
> a starting point:
>
>
> VBScript:
>
> '--------------------8<----------------------
> Const HKLM = &H80000002
>
> sComputer = "." ' use "." for local computer
> Set oReg = GetObject("winmgmts:{impersonationLevel=impersonate}!\\" _
> & sComputer & "\root\default:StdRegProv")
>
> sRegKey = "SOFTWARE\Microsoft\Internet Explorer\" _
> & "ActiveX Compatibility\{00000566-0000-0010-8000-00AA006D2EA4}"
>
> sRegValue = "Compatibility Flags"
>
> oReg.GetDWORDValue HKLM, sRegKey, sRegValue, iValueData
>
> If iValueData = 1024 Then
> WScript.Echo "KB870669 is installed"
> Else
> WScript.Echo "KB870669 is not installed"
> End If
> '--------------------8<----------------------
>
>
>
> Batch file:
>
> @echo off
> set regvaluedata=
> :: split regkey in two to avoid line wrap in newsreader
> set regkey_part1=HKLM\SOFTWARE\Microsoft\Internet Explorer\
> set regkey_part2=ActiveX Compatibility\{00000566-0000-0010-8000-00AA006D2EA4}
> set regpath="\\%COMPUTERNAME%\%regkey_part1%%regkey_part2%"
> set regvalue="Compatibility Flags"
> :: line above for command (line might wrap)
> for /f "Skip=4 Tokens=4" %%a in ('REG.EXE QUERY %regpath% /v %regvalue%') do
> set regvaluedata=%%a
> :: line under for command
> If "%regvaluedata%"=="0x400" Goto KB870669Inst
> Echo KB870669 is not installed on %COMPUTERNAME%
> Goto End
> :KB870669Inst
> Echo KB870669 is installed on %COMPUTERNAME%
> Goto End
> :End
> pause
>
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/community/scriptcenter/default.mspx
>

Re: Scanning tool for KB870669? by itsme

itsme
Wed Jul 14 00:38:26 CDT 2004

Try MS Baseline Security Analyzer.

"docnz" <docnz@discussions.microsoft.com> wrote in message
news:4C726FA0-55F2-48D8-8F61-DDEB913E09F6@microsoft.com...
> Hi there, I am just wondering if anyone knows if Microsoft has released a
scanning tool to confirm if kb870669 has been installed successfully yet on
all network pc's? I am aware you can check add/remove programs but this is
to be done remotely. Any help would be appreciated.
>
> Regards
>
> DOCNZ