HFNetChkPro this command line utility can be used only for inventorying security patches. Shavlik also offers an enhanced version of this product called HFNetChkPro that extends beyond the range of operating systems and products supported by Windows Update.
Microsoft Baseline Security Analyzer (MBSA) offers a graphical and command line interface as well as the ability to evaluate security patch level and system configuration status (but it is still limited to reporting capabilities, and lacks actual update functionality). MBSA's system configuration checks include features like password policy, local Administrator group membership, unnecessary services (a list that can be customized by modifying content of the Services.txt file located in the MSBA installation folder), type of file system, guest account status, and a number of others related to products or services installed on the target computer (e.g., IIS, SQL, and Office).
If you haven't already downloaded our patch management software, then visit the patch management software download page.
This page lists patch management tools that are freely available and will help you manage patches and updates. One open source patch management tool is Patch Manager. Patch Manager helps you track and store your applied patches in an access database with details about each patch.
Another free software update / patch management product is Shavlik's HFNetChkLT which is a feature-limited version of its flagship product.