1 of 1 people found this helpful
we are required to produce a monthly report that shows all patches installed on each server on a monthly basis.
A fundamental, and unfortunate, limitation in the Microsoft WSUS infrastructure is that the WSUS server does not permanently record Installation Date for updates, only the fact that they are installed as of the most recent client detection cycle.
You can obtain Installation Date from the Windows Update History, but this methodology is complicated in the data retrieval and data filtering because the Windows Update History also contains data for all failed installations, as well as installations of superseded updates. The former is fairly simple to filter, but the latter is very difficult to filter. You can get a list of "updates installed in the last 30 days", but no way to identify that any of those updates are currently installed on that system.
If you are deploying updates using Patch Manager, you can develop a report based on the Update Management Task History. For an Update Management task, the Task History Details does record the actual time of installation of the update. Task History is retained for 60 days (by default), and you can configure how long Task History is retained, should you need to report over longer periods of time.