WSHA Windows Update Assessment

Applies To: Windows Server 2008

The Windows Security Health Agent (WSHA) uses Windows Server Update Services (WSUS) to validate Windows software update status and compliance. In order to perform this validation, the client must be able to connect to the configured WSUS server.

Events

Event ID Source Message

1001

Microsoft-Windows-SystemHealthAgent

The Microsoft Security System Health Agent detected a change in the status of %1

1007

Microsoft-Windows-SystemHealthAgent

The Windows Security Health Agent completed an offline scan.

1008

Microsoft-Windows-SystemHealthAgent

The Windows Security Health Agent failed to complete an offline scan.
Failure Code: %1

1023

Microsoft-Windows-SystemHealthAgent

The Windows Security Center detected a system health state change. The change in state was also successfully detected by the Windows Security Health Agent.

1024

Microsoft-Windows-SystemHealthAgent

Windows Security Center detected a system health state change but the Windows Security Health Agent could not enumerate the state change.
Failure Code: %1

Windows Security Health Agent (WSHA)

NAP Infrastructure