Well, I was using baseline to check for the XP SP1 GDI patch. But you are correct, that is not capeable of scanning MS Office. Since that post I have already started using Hfnetchk Pro. Awesome program, everyone working in a large scale network should check it out.

On another note, when and if this ever hits in mass, there are going to be quite a few admins out there caught with their pants down. With so many versions of office out there with different levels of SPs it is quite demanding to patch. But Visio and Project also have seperate patches that are not covered in the Office updates. Ouch...this sucks.

Just to let everyone know, SUS v.2 should be out early next year. It is the long anticipated follow up to v.1 that will support Office updates. Thank god.

I have just one more question, I read on here that XP SP1 is still vuln after applying the patch ( I am almost afraid to ask because the last poor soul got neg'd to death.) and that SP2 is the only way to be completely safe. Is there some article I can reference for this? It can make a big difference in wether we start pushing SP2 from our test group into the AD production groups.

TIA