We have noticed that a lot of our newer machines that are Dell 5480's and Win10 1703 Enterprise that they are not showing as vulnerable at all for the windows10.0-kb4056891-x64-RS2_tw1154910.msu patch. On the ones that are not showing in EM as vulnerable when you run the powershell ( get-speculationcontrolsettings) everything is red and the reg key is present. However you can then install the patch manually and update the BIOS and get all green on the powershell. Is anyone else seeing this on any machines from any vendor? What is the Ivanti detection logic that these machines are not showing as vulnerable when they clearly are?
↧