in trying to figure out which machines are patched/not patched against wannacry, I used a Powershell script that was querying all the servers ... you see in the Windows Update GUI?