Trend Micro shows a computer is missing 3 security updates. I log into the computer, check Automatic Updates, and it's configured to run every night at 3am. I run Windows Update and there's no updates pending. I install Microsoft Baseline Security Analyzer 2.2 and scan the machine: 27 security updates missing, 3 service packs or update rollups are missing.
I can see how Trend Micro may differ in scanning a Windows machine for patches that are or aren't installed, but I can't explain the difference between Windows Update and Microsoft Baseline Security Analyzer showing such varied results. Especially after reading this from the MBSA 2.2 download page:
Built on the Windows Update Agent and Microsoft Update infrastructure, MBSA ensures consistency with other Microsoft management products including Microsoft Update (MU), Windows Server Update Services (WSUS), Systems Management Server (SMS), System Center Configuration Manager (SCCM) 2007, and Small Business Server (SBS).
Anybody have any ideas I'm trying to get a patch management system implemented here, but the varying results from Microsoft tools themselves isn't helping my case much haha.