One-Liner: Domain Controller Patch Levels
Before performing work against your Active Directoy, it's prudent to complete a few checks, e.g. is replication healthy, are my FSMOs up, do I have up-to-date, verified backups etc?
Here's a one-liner to give you a view of whether your patch levels are consistent:
Get-ADDomainController -Filter * | ForEach-Object {
$HotFixes = (Get-HotFix -ComputerName $_.Name).Count
Write-Host "$($_.Name): $($_.OperatingSystem) : $HotFixes HotFixes"
}
Remember, this is only a view, a starting point for further analysis...
"...One foot in sea, and one on shore,
To one thing constant never..."