MBSA - Microsoft Baseline Security Analyzer

Announcements

• Welcome to the Micosoft Baseline Security Analyzer (MBSA) forums!

  Doug NealMicrosoft EmployeeFriday, February 18, 2011 10:34 PM

  This forum is for the Microsoft Baseline Security Analyzer security tool (www.microsoft.com/mbsa). No other security questions can be answered in this forum.

  Welcome to the updated MBSA TechNet forum to discuss the free Microsoft Baseline Security Analyzer security scan tool.

  As a security scan tool based on Microsoft Update, the behavior and results of MBSA are the same as Microsoft Update (not Windows Update that only detects updates for Windows products).  With the exception of WSUS-managed machines where the administrator's approved updates take precedence, MBSA will report exactly what Microsoft Update will report.  Like Systems Management Server (SMS), System Center Configuration Manager (SCCM), WSUS Server, MBSA uses the exact same logic and mechanisms as Microsoft Update to determine update applicability and installed state.

  As a security scan tool, MBSA reports against three classifications of updates: Security Updates, Update Rollups and Service Packs.  Critical (non-security) Updates, Definition Updates and Feature Packs and drivers are not detected by MBSA.

  The majority of issues reported by MBSA users stem from an expected update not being displayed - which is often because the update is not an MSRC security bulletin listed in the Security Bulletin Search (http://www.microsoft.com/technet/security/current.aspx) or is not an update rollup (like a new version of Internet Explorer) or a Service Pack.

  Almost all issues can be easily resolved by reviewing the error message displayed by MBSA, reviewing the System Requirements within the MBSA Help file (installed with MBSA) or the online MBSA Q&A (FAQ) located here: http://technet.microsoft.com/en-us/security/cc184922.

  The latest MBSA news and information can be found at www.microsoft.com/mbsa and in the MBSA Q&A (FAQ).