Service Pack - Event Viewer ID?

[Jim]

Hi,

If a service pack or other type of update is installed on a Windows 2k3
server, which log would the event be recorded? Which event number would it
might be or which source name would be given?

I am trying to discover when an update was installed.

thanks,

Jim

 

[Mel]

RE: Service Pack - Event Viewer ID?

Some things to look for...

In the System Log ---
Source: NtServicePack
Event: 4371, 4377

You might want to check the settings for your automatic updates in Control
Panel. If you see "SYSTEM" as the User this is part of the automatic
updates, otherwise you will see the actual User Account that installed the
update/patch (as well as the date, time, etc.).


Mel


"Jim" wrote:

> Hi,
>
> If a service pack or other type of update is installed on a Windows 2k3
> server, which log would the event be recorded? Which event number would it
> might be or which source name would be given?
>
> I am trying to discover when an update was installed.
>
> thanks,
>
> Jim

 

[Jim]

RE: Service Pack - Event Viewer ID?

Mel,
This is what I was looking for...
thanks,

Jim


"Mel" wrote:

> Some things to look for...
>
> In the System Log ---
> Source: NtServicePack
> Event: 4371, 4377
>
> You might want to check the settings for your automatic updates in Control
> Panel. If you see "SYSTEM" as the User this is part of the automatic
> updates, otherwise you will see the actual User Account that installed the
> update/patch (as well as the date, time, etc.).
>
>
> Mel
>
>
> "Jim" wrote:
>
> > Hi,
> >
> > If a service pack or other type of update is installed on a Windows 2k3
> > server, which log would the event be recorded? Which event number would it
> > might be or which source name would be given?
> >
> > I am trying to discover when an update was installed.
> >
> > thanks,
> >
> > Jim