I have to take care of 200+ client machines (mainly Windows 8,8.1, 10) in an organization. There are many apps installed: web browsers, Java, Flash & many more. Are there any tools/techniques to check which machines have outdated software, for example vulnerable Java, and to get regular reports of the machines that needs update?
closed as off-topic by Xiong Chiamiov, John Deters, schroeder♦ Mar 27 '17 at 7:15
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "Questions seeking product recommendations are off-topic as they become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve." – Xiong Chiamiov, schroeder
There are several classes of tools that can do this.
You may want to look at using a vulnerability scanner that can run authenticated scans where it logs in and can scan the local filesystems & configurations rather than just scanning the services listening on the IP addresses on the network.
Continuous Integration and Continuous Deployment (CI/CD) tools can gather most of the same information but also help you with making the updates to these systems.
You may find that the best solution for your environment is to use multiple types of tools too.
To produce report and for better control of such large set of organisation windows machines, I would write a script querying installed software and version interfacing directly with WMI
E.g. Powershell can retrieve the list of installed applications in a remote computer with the line:
Get-WmiObject win32_Product -ComputerName...