Using Microsoft Baseline Security Analyzer for QFEs

6
9. After the scan is complete, select Result details under Windows Security Updates.
10. Download all updates listed as Critical.
11. Deploy the updates to the necessary thin clients.
12. Repeat steps 9 through 11 with all updates listed as Critical under Developer Tools, Runtimes, and Redistributables.
13. If you are using Windows Embedded Standard 7, verify that KB2852386 has been installed.
A. To view the list of installed updates, select Start, select Control Panel, and then select Programs and Features.
B. Select View installed updates.
C. If KB2852386 is not installed, go to https://support.microsoft.com/en-us/kb/2852386
.
D. Download and install KB2852386.
14. If you are using Windows Embedded Standard 7, run the cleanmgr tool to perform Windows Update Cleanup and to
free disk space. For more information, go to
https://blogs.technet.microsoft.com/askpfeplat/2013/10/08/breaking-
news-reduce-the-size-of-the-winsxs-directory-and-free-up-disk-space-with-a-new-update-for-windows-7-sp1-
clients/ and see the “How to Automate Windows Update Cleanup” section.
15. Disable the Windows Update service after the updates have been applied.