Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

We have a personal laptop that is installed with Microsoft Windows Vista x86 and Service Pack 2. I have run Windows Update several times but no more updates are available however Secunia PSI continues to display the list below as critical and unpatched. I attempted to install the updates manually by downloading the relevant updates from Microsoft however whenever I run them, it returns the message that it is not required by the system.

How do I make sure that the laptop is fully patched?

Also it is a newly rebuilt system i.e. everything has been re-installed including Windows Vista

enter image description here

share|improve this question
    
Often the KB articles related to the updates will often tell you which files will be updated to which versions, have you checked and compared your versions? –  techie007 May 20 '12 at 4:55
    
@techie007 - Yes I have. –  PeanutsMonkey May 20 '12 at 5:24
    
OK, so were the individual files up-to-date (or newer) according to the version #'s? If so, then you don't need the updates. –  techie007 May 20 '12 at 6:51
    
@techie007 - I can't find them in the list of patches installed by Microsoft however that is not to say they could not be installed if they had been included in Service Pack 2. –  PeanutsMonkey May 20 '12 at 17:33
2  
Remember you need to do a full scan after installing any Microsoft related updates until Secuna PSI detects the affected products as patched. –  Gurken Papst May 20 '12 at 17:42
show 3 more comments

1 Answer

up vote 3 down vote accepted

I trust Microsoft to know what patches I need more than secunia. Windows update is one way to know your Windows Operating System is fully patched, after all it is their OS, not secunia's.

Microsoft has their own Security analyzer software, however, it does not look at 3rd party software, just Microsoft products.

. enter image description here

.

I don't change any of the scan defaults, you also need an internet connection to scan. Be patient it takes a while to complete the scan.

.

enter image description here

.

Some of the results can be misleading on a home computer, this software was designed for a corporate environment, you can ignore certain ones if you wish.

  • Local account password test, this was flagged because my guest account was not "disabled", it is not active but is not disabled, so it gets a flag. This is normal on a home PC.

  • Guest Account, these should be disabled in a corporate environment, they are not by default in home versions of Windows Vista or 7, its up to you if you want to hard block the guest account.

  • Automatic Updates, I configure mine differently than full automatic so it got flagged.

  • Administrators, I have 2 Admin accounts, but my Acronis software installed a hidden Admin user account for its backup purposes, kind of nice it showed it to me even when hidden. More than 2 can be a problem in a corporate environment but is ok on a home PC.

  • Password Expiration, by default home versions of Windows do not expire passwords, in a corporate environment you can force users to change their logon passwords whenever you feel it is appropriate, weekly, monthly etc, not needed on a home PC.

.

enter image description here

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.