Network Security Hotfix Checker.

Syntax
      hfnetchk.exe [options]

Options
       [-h hostname]   NetBIOS computer name(s) to scan. default=local host. 
                       separate multiple host name entries with a comma, 

       [-fh hostfile]  The name of a file containing NetBIOS computer names to scan

       [-i ipaddress]  The IP address of computer(s) to scan. 
                       separate multiple entries with a comma,

       [-fip ipfile]   The name of a file containing IP addresses to scan.
                       (Maximum 256 addresses per file)

       [-r range]      An IP address range to be scanned,
                       -r start_ip_address-end_ip_address

       [-d domainname] A domain name to scan. All computers in the domain are scanned.

       [-n]            All computers on the local network are scanned.
                       All computers in all domains are scanned.

       [-b]            Scan only for `baseline critical` patches

       [-history level] Display explicit install history - ignoring supersedences and roll-up patches 
                        This option is not normally required

       [-t threads]    The number of threads used to run the scan. (1 to 128). Default = 64. 
                       More threads may increase the speed of the scan. 

       [-o output]     The output format: tab = tab delimited format.
                                         wrap = word-wrapped format.(default)
                       When scanning more than 255 hosts you must use tab output. 
                       tab is useful for redirecting the screen output to a text or spreadsheet file.

       [-x datasource] The XML hotfix data. An XML file name, compressed XML .cab file, or URL
                       The default file is the Mssecure.cab file from the Microsoft Web site. 

                       Running Hfnetchk without the -x switch, the XML file Mssecure.xml is downloaded from Microsoft.com.
                       store the XML file in the same folder as Hfnetchk.exe or host on a Web server or file server.
                       After you download the file, you can run future scans with the -x switch

       [-z]            Skip registry checks (file checks only)

       [-v]            Verbose - display the reason a hotfix failed
                                 when combined with -z will display any missing files.

       [-s 1]          Suppress NOTE warnings
       [-s 2]          Suppress both NOTE and WARNING messages

       [-nosum]        Skip checksum validation for the hotfix files.

       [-u username]   The username to use when scanning a local or remote computer(s)
       [-p password]   Password for above (sent via challenge-response authentication)

       [-f outfile]    The name of a file to store the results. 

       [-about]        About info

       -?              Menu of options

You can use the switches above in combination - so a single command can scan a range of IP addresses plus a list of specific machines.