Security Profiling's SysUpdate PC&E and its Policy Compliance and Enforcement 1.0 module cannot yet be recommended. The system gets low marks overall because the tools omit fine-grained scheduling abilities; lack policy support for non-Windows 2000 clients; have inadequate real-time monitoring; and can require manual intervention for Windows XP clients. SysUpdate PC&E is rated fair for capability, performance, and management, and good for usability, interoperability, scalability, and security. In their first testing of SysUpdate, reviewers found several bugs that impact management of the console and scheduling engine, and Security Profiling followed up with a new version that still cannot be recommended. They found that SysUpdate PC&E has module-based security policy enforcement abilities and increasing multiplatform support, but still needs better scheduling control and real-time reporting abilities. The OnSite Server application is the core of SysUpdate PC&E. It uses a logic engine to compare administrator- created policy templates with client configurations. OnSite Server can identify missing patches or policy settings, then automate distribution of needed fixes. Testers were impressed with the built- in Multiple Path Remediation feature, which permits OnSite Server to provide multiple remediation options, including the ability to choose to deploy a patch or disable a problematic service. Another neat tool remotely deploys a client agent to clients with Microsoft Windows 95 through Windows Server 2003.