Microsoft BaseLine Security Analyser

[nellie2]

Microsoft Baseline Security Analyzer (MBSA) is an easy-to-use tool designed for the IT professional that helps small- and medium-sized businesses determine their security state in accordance with Microsoft security recommendations and offers specific remediation guidance. Improve your security management process by using MBSA to detect common security misconfigurations and missing security updates on your computer systems.

It's also well worth having it on your home PC too... :satisfy:

If you already have MBSA then please note;

Important: The MBSA 1.2.1 tool reaches its end of life on March 31, 2006. After this date, MBSA 1.2.1 will no longer be supported and the MSSecure.XML file automatically downloaded by MBSA 1.2 will no longer be updated to include new security bulletins. We encourage you to migrate to MBSA 2.0 before March 31, 2006, to ensure continued security bulletin detection.

More here and download

[AlanHo]

Nellie

Thanks for the link - I have downloaded, installed and run the programme to scan my computer.

I am a little bemused.

The scan stated that I was missing the following security updates :-

Outlook 2003 Email filter KB911961

Security Update for Outlook 2003 KB892843

Update for Office 2003 KB907417

Office 2003 SP2

I went to the MS update site - to see a window which clearly said "Your computer is set to receieve security and critical updates automatically". However, I clicked on the check button and was advised to download the above updates - which I did.

I then did another MBSA scan and all was OK - I got a good security rating.

Hence this question - if my computer is set to receive automatic updates why could there be so many missing ?

My computer settings In Windows XP Control Panel > Automatic Updates > "Automatically download recommended updates and install them " every day at 08:00.

My computer is always on at that time.

It's a worry.

[nellie2]

Because the auto updater is only configured to tell you about system security updates... not updates for your other Microsoft Applications. That is the good thing about MBSA..it nudges you to check your other applications!

[-pops-]

Excellent program, nel.

Showed me some vulnerabilities that would never have occurred to me (macro security in Excel for one!!)

I'm now all set up and feeling fully secure.

I'm off to my son's studio tomorrow to set the security on his machines.