Admin Tips
- Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base
  - Windows XP
    - Admin Tips
      - Security
        Microsoft Baseline Security Analyzer (MBSA)

Section(s): Security , Security, Security
Published on Mar 07, 2005.
Last Modified on Mar 07, 2005.
Last Modified by Wayne Maples.
Rated 3.6 out of 5 based on 17 votes.

Microsoft is beginning to release useful security oriented tools. Microsoft Baseline Security Analyzer (MBSA) checks Windows NT 4 SP4 and up, Windows 2000, and Windows XP for common security vulnerabilities. MBSA can be installed on Windows 2000 and Windows XP. MBSA currently performs five checks:

Hotfix checks : scans for missing hotfixes for Windows NT 4, Windows 2000, all system services, SQL 7.0, SQL 2000, and IE 5.01 and later.
Password checks : checks for blank and weak passwords.
Vulnerability checks : scans for security issues and common configuration mistakes in Windows operating systems (NT4, 2000, and XP).
IIS checks : scans for security issues in IIS 4.0 and 5.0.
SQL vulnerability checks : scans for security issues in SQL 7.0 and 2000.

The tool can be run in GUI mode ( mbsa.exe ) or more usefully for automated periodic checks, in command line mode (mbsacli.exe).