Patch templates (Windows)

Module: OS Patches

Supported Platforms: Windows 2000, Windows 2003, Windows 2008, Windows Vista, Windows XP

Use this option to specify OS Patches template files. Only enabled template files that match the agent's operating system are used. For example, agents running Windows 2000 use only enabled Windows Server 2003 templates.

The following table lists the error messages for the check.

Table: Error messages for Patch templates

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: STKU_PATCHINSTALLED_AND_CHECKED

Category: Policy Compliance

  • Windows 2000 (45429)

  • Windows 2003 (215129)

  • Windows 2008 (216029)

  • Windows Vista (215729)

  • Windows XP (49029)

Title: Patch Installed

Description:This patch is installed. It fixes a problem that gives unauthorized access to your system or certain files. Search for patch information at the Microsoft Web site (www.microsoft.com). Install the patch or implement a workaround.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s;MS Knowledge Base ID: %s; Date Issued: %s; Description: %s %s]

String ID: STKU_PATCHNOTINS3

Category: Policy Compliance

  • Windows 2000 (45430)

  • Windows 2003 (215130)

  • Windows 2008 (216030)

  • Windows Vista (215730)

  • Windows XP (49030)

Title: Patch not installed

Description:This patch is not installed. It fixes a problem that gives unauthorized access to your system or certain files. Search for patch information at the Microsoft Web site (www.microsoft.com). Install the patch or implement a workaround.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [MS Knowledge Base ID: %s; Date Issued: %s; Description: %s %s]

String ID: STKU_PATCHNOTINS2

Category: Policy Compliance

  • Windows 2000 (45431)

  • Windows 2003 (215131)

  • Windows 2008 (216031)

  • Windows Vista (215731)

  • Windows XP (49031)

Title: Patch not installed

Description:This patch is not installed. It fixes a problem that lets unauthorized users cause denial of service to legitimate users. Search for patch information at the Microsoft Web site (www.microsoft.com). Install the patch or implement a workaround.

Severity: yellow-2

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [MS Knowledge Base ID: %s; Date Issued: %s; Description: %s %s]

String ID: STKU_PATCHNOTINS1

Category: Policy Compliance

  • Windows 2000 (45432)

  • Windows 2003 (215132)

  • Windows 2008 (216032)

  • Windows Vista (215732)

  • Windows XP (49032)

Title: Patch not installed

Description:This patch is not installed. It fixes a functionality problem, not a security problem. Search for patch information at the Microsoft Web site (www.microsoft.com). Install the patch or implement a workaround.

Severity: yellow-2

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [MS Knowledge Base ID: %s; Date Issued: %s; Description: %s %s]

String ID: STKU_PATCHNOTINS0

Category: Policy Compliance

  • Windows 2000 (45433)

  • Windows 2003 (215133)

  • Windows 2008 (216033)

  • Windows Vista (215733)

  • Windows XP (49033)

Title: Patch not installed

Description:This patch is not installed. The message is informational only. Search for patch information at the Microsoft Web site (www.microsoft.com). Install the patch or implement a workaround.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [MS Knowledge Base ID: %s; Date Issued: %s; Description: %s %s]

String ID: STKU_PATCHNOTAVAIL3

Category: Policy Compliance

  • Windows 2000 (45434)

  • Windows 2003 (215134)

  • Windows 2008 (216034)

  • Windows Vista (215734)

  • Windows XP (49034)

Title: Patch not available

Description:A CERT advisory has been issued for a problem that can compromise access to your computer or files. When the advisory was issued, Microsoft was working on a patch for the problem. Read the CERT advisory at www.cert.org. Implement suggested workarounds and contact your OS vendor to obtain the patch that addresses the problem as soon as it is available.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [Date Issued: %s; Description: %s]

String ID: STKU_PATCHNOTAVAIL2

Category: Policy Compliance

  • Windows 2000 (45435)

  • Windows 2003 (215135)

  • Windows 2008 (216035)

  • Windows Vista (215735)

  • Windows XP (49035)

Title: Patch not available

Description:A CERT advisory has been issued for a problem that can lead to denial of service for legitimate users. When the advisory was issued, Microsoft was working on a patch for the problem. Read the CERT advisory at www.cert.org. Implement suggested workarounds and contact your OS vendor to obtain the patch that addresses the problem as soon as it is available.

Severity: yellow-2

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [Date Issued: %s; Description: %s]

String ID: STKU_INVALID_OSVER

Category: Policy Compliance

  • Windows 2000 (45437)

  • Windows 2003 (215137)

  • Windows 2008 (216037)

  • Windows Vista (215737)

  • Windows XP (49037)

Title: Invalid OS version

Description:The OSVer/SPVer field of the Patch template uses an invalid format. The correct format is #.#-SP#, where the first # is the major OS version and the second # is the minor version. The -SP# identifies a service pack. For all service packs, omit -SP. For example, 5.2, 5.2-SP1, or 5.2-SP2 are valid entries.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: []

String ID: STKU_INVALID_SPVER

Category: Policy Compliance

  • Windows 2000 (45438)

  • Windows 2003 (215138)

  • Windows 2008 (216038)

  • Windows Vista (215738)

  • Windows XP (49038)

Title: Invalid service pack version

Description:The OSVer/SPVer field of the Patch template uses an invalid format. The correct format is #.#-SP#, where the first # is the major OS version and the second # is the minor version. The -SP# identifies a service pack. For all service packs, omit -SP. For example, 5.2, 5.2-SP1, or 5.2-SP2 are valid entries.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: []

String ID: STKU_INVALID_ARCHITECTURE

Category: Policy Compliance

  • Windows 2000 (45441)

  • Windows 2003 (215141)

  • Windows 2008 (216041)

  • Windows Vista (215741)

  • Windows XP (49041)

Title: Invalid architecture

Description:The Architecture field of the Patch template is incorrect. It must be ix86.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: []

String ID: ESM_NO_TEMPLATE_SPECIFIED

Category: Policy Compliance

  • Windows 2000 (45442)

  • Windows 2003 (215142)

  • Windows 2008 (216042)

  • Windows Vista (215742)

  • Windows XP (49042)

Title: No applicable template files specified

Description:The OS Patches module was run without applicable template files. No security checks were performed. Make sure that at least one template file is enabled for the agent's operating system and version.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_NO_COMPARISON_SPECIFIED

Category: Policy Compliance

  • Windows 2000 (45443)

  • Windows 2003 (215143)

  • Windows 2008 (216043)

  • Windows Vista (215743)

  • Windows XP (49043)

Title: No comparison type specified

Description:The OS Patches module was run with no comparison options enabled. No security checks were performed. Enable one or more comparison options.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_UNKNOWN_PATCH_ID

Category: Policy Compliance

  • Windows 2000 (45447)

  • Windows 2003 (215147)

  • Windows 2008 (216047)

  • Windows Vista (215747)

  • Windows XP (49047)

Title: Patch is not a registry or file-only patch

Description:Patch IDs must begin with a Q, q, KB, kb, F, f, M, or S. Patches with IDs that begin with F or f are file-only patches. Patches with IDs that begin with Q, q, KB, kb, M, or S can be identified either through the registry or by using file dates/versions.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_FORBIDDEN_PATCH_3

Category: Policy Compliance

  • Windows 2000 (45448)

  • Windows 2003 (215148)

  • Windows 2008 (216048)

  • Windows Vista (215748)

  • Windows XP (49048)

Title: Forbidden patch found

Description:This patch is installed. According to the template, it is forbidden. Remove it and install the previous version of the patch if one is available.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [MS Knowledge Base ID: %s; Date Issued: %s; Description: %s %s]

String ID: ESM_FORBIDDEN_PATCH_2

Category: Policy Compliance

  • Windows 2000 (45449)

  • Windows 2003 (215149)

  • Windows 2008 (216049)

  • Windows Vista (215749)

  • Windows XP (49049)

Title: Forbidden patch found

Description:This patch is installed. According to the template, it is forbidden. Remove it and install the previous version of the patch if one is available.

Severity: yellow-2

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [MS Knowledge Base ID: %s; Date Issued: %s; Description: %s %s]

String ID: ESM_FORBIDDEN_PATCH_1

Category: Policy Compliance

  • Windows 2000 (45450)

  • Windows 2003 (215150)

  • Windows 2008 (216050)

  • Windows Vista (215750)

  • Windows XP (49050)

Title: Forbidden patch found

Description:This patch is installed. According to the template, it is forbidden. Remove it and install the previous version of the patch if one is available.

Severity: yellow-2

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [MS Knowledge Base ID: %s; Date Issued: %s; Description: %s %s]

String ID: ESM_FORBIDDEN_PATCH_0

Category: Policy Compliance

  • Windows 2000 (45451)

  • Windows 2003 (215151)

  • Windows 2008 (216051)

  • Windows Vista (215751)

  • Windows XP (49051)

Title: Forbidden patch found

Description:This patch is installed. According to the template, it is forbidden. Remove it and install the previous version of the patch if one is available.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [MS Knowledge Base ID: %s; Date Issued: %s; Description: %s %s]

String ID: ESM_OPTIONAL_PATCH_NO_SUPERSEDE

Category: Policy Compliance

  • Windows 2000 (45452)

  • Windows 2003 (215152)

  • Windows 2008 (216052)

  • Windows Vista (215752)

  • Windows XP (49052)

Title: Optional patch supersedes nothing

Description:The patch cannot be Optional unless it supersedes at least one other patch.

Severity: yellow-2

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_INVALID_VALUE_OPERATOR

Category: Policy Compliance

  • Windows 2000 (45453)

  • Windows 2003 (215153)

  • Windows 2008 (216053)

  • Windows Vista (215753)

  • Windows XP (49053)

Title: Registry value comparison operator is invalid

Description:The comparison operator being used is invalid. Valid operators include: = != < > <= >= =~

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_INVALID_REG_VALUE_FORMAT

Category: Policy Compliance

  • Windows 2000 (45454)

  • Windows 2003 (215154)

  • Windows 2008 (216054)

  • Windows Vista (215754)

  • Windows XP (49054)

Title: Incorrect format for registry value condition

Description:The registry value string contains formatting errors. The correct format is: [path to registry value][comparison operator]"[value to be compared]" Where [comparison operator] can be any of the following: = != < > <= >= =~ For example: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\somevalue="testdata" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\somevalue<"15" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\somevalue=~".*"

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_NA_PATCH_STATUS

Category: Policy Compliance

  • Windows 2000 (45459)

  • Windows 2003 (215159)

  • Windows 2008 (216059)

  • Windows Vista (215759)

  • Windows XP (49059)

Title: Cannot determine patch status

Description:Cannot determine patch status because template information is incorrect, incomplete, or comparison options selected are not supported for this patch.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_INVALID_VERSION_VALUE_FORMAT

Category: Policy Compliance

  • Windows 2000 (45461)

  • Windows 2003 (215161)

  • Windows 2008 (216061)

  • Windows Vista (215761)

  • Windows XP (49061)

Title: Incorrect format for file version value condition

Description:The file version string contains formatting errors. The correct format is: [path to file][comparison operator]"[value to be compared]" Where [comparison operator] can be any of the following: = != < > <= >= =~ For example: c:\\WINNT\\system32\\myfile.sys="6.3.3" c:\\WINNT\\system32\\myfile.sys>"6" c:\\WINNT\\system32\\myfile.sys=~"6\\.3\\..*" Notice that every backslash must be backslashed.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]