Microsoft Baseline Security Analyzer Review

The Microsoft Baseline Security Analyzer Review took approximately five minutes to download and install. The installation is the same regardless of which version of the Windows operating system is running on the system.

The installation requires no extra information, nor does the system need to be restarted for any of the settings to take effect.

It is simple, straightforward and fast.

Running the scans is straightforward, as MBSA takes care of all the required information. There are essentially two options for

scanning: one is for single systems, and the other for a group of machines.

For single machines, the application will detect the requisite information, like the IP address, in case it is a

remote machine; the name of the workstation; and its parameters for the scan. The user can select from the list of options, although for the first time round, it is probably best to let the application scan everything.

Microsoft Baseline Security Analyzer will first check for updates for itself, before moving on to the others. At the end of the scan, it presents a report to the user with a list of recommended actions.

MBSA has both a graphical and a command line interface. The graphical interface is useful for first time users, and as the user becomes more familiar with the system, they can slowly graduate to the command line interface. The advantage of the command line interface is the ability to specify exactly what needs to be scanned, giving the user greater control over the functions.

• Microsoft Baseline Security Analyzer detects many more updates, across a wider spectrum of Windows products than Windows

Update.

• The report at the end of the scan gives a detailed assessment of all the aspects of the system, including a list of recommended actions, the level of current security and the lapses that could potentially be exploited. In addition to this information, the report also contains step-by-step instructions on how to rectify security lapses, or at least links to the relevant reference material.

• MBSA can scan multiple computers, as well computers that are at a remote location, making the tool easy

to use for network administrators.

• Examines systems for best practices like strong passwords, password expiry, among other factors.

• It also has the ability to scan servers that run IIS and SQL Server for discrepancies and incorrect settings

• MBSA also scans commonly used products like Internet Explorer and Outlook for adequate security settings.