The issue that you are seeing has to deal with the way that Microsoft
creates patches and hot fixes.

HFNETCHK checks 3 things from what I know.
1) File Version
2) Check Sum
3) Registry entry

Many of the patches that you can apply do not have a registry entry that
tells the system that it is installed. If you want to get around this
you have to use an option with the tool

Example:
This will put it into verbose mode and skip checking the registry but
will do the other 2 checks talked about earlier.

Hfnetchk -v -s 2

This worked for me and I heard that MS was supposed to be unifying this
process so that this would not happen, but that was 3 months ago and it
still has not happened. I guess MS likes to have egg on the face. ;)

Regards,
John

-----Original Message-----
From: Ingersoll, Jared [mailto:jaredcswv.com]
Sent: Monday, July 29, 2002 11:28 AM
To: focus-mssecurityfocus.com
Subject: hfnetchk reporting

Hi,

Several systems folks here have run into the issue of hfnetchk reporting
"Patch NOT Found" after applying the appropriate patches and rebooting.
This
seem to be consistent of both NT and 2000 (though I haven't replicated
this
issue myself). Anyone run into this issue with hfnetchk.exe?

here's one particular patch on an NT 4.0 sp6a server:

Patch NOT Found MS02-006 Q314147

Ideas?

Jared

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]