Security Patching Status

Does anyone have any advice or experience with local and random security patching checks on a PC?

I have a requirement to randomonly search PC's running Windows for their current security patch status based on the current microsoft baseline.

If possible I don't want to install any application on the PC or make a connection to the Internet. Ideally I just want to download onto a USB flash drive the software (maybe MBSA if this fits the requirement) and the latest Microsoft Security baseline list then run locally and save the report to the same USB drive.

Can I do this? And if so, what application would I use? MBSA? Is their an idiots guide to how this could be achieved?

Thanks

 

Welcome to Major Geeks! I did some quick research at Microsoft, and it states that the MSBA can be use for both online and offline security scans. That tells me that you don't need an internet connection to scan. Does it generate reports? I don't know. Like I said, quick research Here's a link to MSBA FAQs, maybe this will answer your questions:
http://www.microsoft.com/technet/security/tools/mbsa2/qa.mspx