Microsoft Baseline Security Analyzer 2.1

4.0 out of 5 stars 4.0 (59 votes)

(May 2, 2008)

Windows 2000/2003/2008/Vista/XP / Freeware / 20,859 downloads

Microsoft Baseline Security Analyzer (MBSA) analyzes Windows systems for common security misconfigurations. MBSA includes a graphical and command line interface that can perform local or remote scans of Windows systems. MBSA runs on Windows 2000 and Windows XP systems and will scan for missing hotfixes and vulnerabilities in the following products: Windows NT 4.0, Windows 2000, Windows XP, Internet Information Server (IIS) 4.0 and 5.0, SQL Server 7.0 and 2000, Internet Explorer (IE) 5.01 and later, and Office 2000 and XP.

MBSA uses a version of HFNetChk to scan for missing hotfixes and service packs for Windows, IIS, and SQL Server. MBSA will create and store individual XML security reports for each computer scanned and will display the reports in the graphical user interface in HTML.

Reviews of Microsoft Baseline Security Analyzer

  1. 5 out of 5 stars
    neogator

    Reviewing 2.1 (May 11, 2008)

    MBSA 2.1 offers Windows Vista and Windows Server 2008 compatibility, a revised user interface, 64-bit support, improved Windows Embedded support, and compatibility with the latest versions of the Windows Update Agent (WUA) based on Microsoft Update.

  2. 2 out of 5 stars
    -Lord-

    Reviewing 2.1 (May 6, 2008)

    Lack of vista support.

  3. 4 out of 5 stars
    stevetures

    Reviewing 2.0.1 (Nov 9, 2006)

    As a budding security prof., this tool is constantly listed as a useful tool in many cases. It wasn't originally written by M$ either(a confidence statement in my book).

    Using it is easy, which is how it should be since M$ is everywhere and there's no guarantee that their admins are capable.

    From what I read, this is a minor update that makes it more compatible with the latest Windows Update def.-type file (a bugfix).

    And it gets a 4 in my book since there are better tools out there (Nessus anyone?)

  4. 1 out of 5 stars
    Aegis69

    Reviewing 2.0.1 (Nov 9, 2006)

    What could Microsoft possibly know about securing a computer system?

  5. 4 out of 5 stars
    Mark Gillespie

    Reviewing 2.0.1 (Nov 9, 2006)

    Quite good, got a bug with MDAC reporting thou, as it constantly tells me I need a MDAC update, but when I run the MDAC update it requests, it says I already have a newer version!! Doh..

    No way to get a clean bill of health from it...

Discuss Microsoft Baseline Security Analyzer