Home / server / Questions / 190690
Accepted
Element
Asked: 2010-10-14 13:12:05 +0800 CST

Find Installation Date of Windows Updates

  • 772

Is it possible to find the date when windows updates were installed on windows server 2003?

If I go to the controlpanel->install/uninstall programs and check the "Show Updates" checkbox it will show the windows updates that have been installed, but I don't see the installation date anywhere.

windows-server-2003 installation windows-update

7 Answers

  1. You can also look here - %windir%\SoftwareDistribution\ReportingEvents.log.

    • 3

  2. In powershell you can do that : Get-WmiObject -Class "win32_quickfixengineering" easy and fast .

    • 3

  3. From the command prompt, you can use the following wmic command to get a full list of the installed updates in html format:

    wmic qfe list full /format:htable > hotfixes.html

    If you prefer the csv format, use the /format:csv modifier instead:

    wmic qfe list full /format:csv > hotfixes.csv
    • 3
  4. Best Answer

    Try looking in c:\windows\WindowsUpdate.log

    • 2

  5. I think Get-Hotfix has been available via PowerShell since version 3.

    You can run it locally or against remote systems.

    Locally: 

    # Get all hotfixes locallly

    Get-Hotfix

# Look for a specific hotfix

    Get-Hotfix -Id KB2693643

    To get hotfixes for remote system(s), provide it -Computername with your list of systems. (Note: This requires RPC open on the firewall between systems you're querying and wherever you're running Get-Hotfix from)

    Get-Hotfix -Computername YourComputer

or

Get-Hotfix -Computername Computer1, Computer2, Computer3

Get-Hotfix -Computername (Get-Content \path\to\your_list.txt)
    • 2

  6. Psinfo -h will show you the dates of install as well. Psinfo is part of the Pstools goodies.

    • 1

  7. You can refer to the last successful update install time:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install
REG_SZ: LastSuccessTime

    This is a datetime value formatted as yyyy-MM-dd HH:mm:ss.

    • 1