6 free network vulnerability scanners; Show More. Microsoft Baseline Security Analyzer (MBSA) Microsoft Baseline Security Analyzer (MBSA) can perform local or remote scans on Windows desktops.

• Latest Version:

  Microsoft Baseline Security Analyzer 2.3 (32-bit) LATEST

• Requirements:

  Windows 2000 / XP / Vista / Windows 7

• Author / Product:

  Microsoft Corporation / MBSA (32-bit)

• Old Versions:

• Filename:

  MBSASetup-x86-EN.msi

• MD5 Checksum:

  a37f2ed37df79b33bf9354fa0effb5c5

• Details:

  MBSA (32-bit) 2020 full offline installer setup for PC

Microsoft Baseline Security Analyzer (popularly called by its short name MBSA) is a free tool, designed to help small and medium-sized organizations to assess and beef up the security of their networks. It analyzes the used computer defense tools, and if they are found to be out-of-date, it scans for security updates, and when possible hot fixes are offered. All of this is done through very streamlined and easy to access interface, which enables even inexperience d users and people with small computer technical knowledge to easily get informed about the quality of their networks and software vulnerabilities. Those can include Windows administrative vulnerabilities, database vulnerabilities, state of security updates, weak passwords and more.
MBSA latest version of Microsoft’s free security and vulnerability assessment scan tool for administrators, security auditors, and IT professionals. MBSA builds on the previous MBSA version that supports Windows 7 and Windows Server 2008 R2 and corrects minor issues reported by customers.
Created directly by Microsoft and used by hundreds of thousand businesses and private users, Microsoft Baseline Security Analyzer manages to singlehandedly create sold base upon your software security can be reinforced. After identifying missing security updates and common security misconfigurations, all Windows users are recommended to install some other form of trusted internet security software that will manage your real-time protection.
Baseline Security Analyzer Main Features are:

• Command line tool
• Supports local and remote scans
• Can scan multiple instances of SQL servers
• Windows Embedded support
• Graphical user interface

Microsoft Baseline Security Analyzer

Screenshot of Microsoft Baseline Security Analyzer analysis result
Developer(s)	Microsoft
Initial release	16 August 2004[1]
Stable release
Operating system	Windows 7, Windows Server 2008, Windows Vista, Windows Server 2003, Windows XP and Windows 2000[2]
Platform	IA-32 and x86-64[2]
Size	1.5 ~ 1.7 MB[2]
Available in	English, German, French and Japanese[2]
Type	Computer security
License	Freeware
Website	technet.microsoft.com/en-us/security/cc184924.aspx

Microsoft Baseline Security Analyzer (MBSA) is a discontinued software tool which is no longer available from Microsoft that determines security state by assessing missing security updates and less-secure security settings within Microsoft Windows, Windows components such as Internet Explorer, IISweb server, and products Microsoft SQL Server, and Microsoft Office macro settings. Security updates are determined by the current version of MBSA using the Windows Update Agent present on Windows computers since Windows 2000 Service Pack 3. The less-secure settings, often called Vulnerability Assessment (VA) checks, are assessed based on a hard-coded set of registry and file checks. An example of a VA might be that permissions for one of the directories in the /www/root folder of IIS could be set at too low a level, allowing unwanted modification of files from outsiders.

Version history[edit]

Versions 1.2.1 and below run on NT4, Windows 2000, Windows XP, and Windows Server 2003, provide support for IIS versions 5 through 6, SQL Server 7 and 2000, Internet Explorer 5.01 and 6.0 only, and Microsoft Office 2000 through 2003. Security update assessment is provided by an integrated version of Shavlik's HFNetChk 3.8 scan tool. MBSA 1.2.1 was localized into English, German, French and Japanese versions and supported security assessment for any locale.

Version 2.0 retained the hard-coded VA checks, but replaced the Shavlik security assessment engine with Microsoft Update technologies which adds dynamic support for all Microsoft products supported by Microsoft Update. MBSA 2.0.1 was released to support the revised Windows Update (WU) offline scan file (WSUSSCN2.CAB). MBSA 2.1 added Vista and Windows Server 2008 support, a new Vista-styled GUI interface, support for the latest Windows Update Agent (3.0), a new Remote Directory (/rd) feature and extended the VA checks to x64 platforms.

In the August 2012 Security Bulletin Webcast Q&A on Technet it was announced that 'The current version of MBSA (2.2) will not support Windows 8 and Microsoft currently has no plans to release an updated version of the tool.'^[3]

In November 2013 MBSA 2.3 was released. Zombie survival guide printable. This release adds support for Windows 8, Windows 8.1, Windows Server 2012, and Windows Server 2012 R2. Windows 2000 will no longer be supported with this release.^[4]

Microsoft support and updates for MBSA has ended. The current version 2.3 does not offer official support for Windows 10 or Windows Server 2016. The Microsoft MBSA webpage has been removed.^[5]

How MBSA differs from Microsoft Update[edit]

MBSA only scans for 3 classes of updates, security updates, service packs and update rollups. Critical and optional updates are left aside.

See also[edit]

References[edit]

1. ^'Download Details: Microsoft Baseline Security Analyzer v1.2.1 (for IT Professionals)'. Microsoft Download Center. Microsoft Corporation. Archived from the original on 18 June 2009. Retrieved 13 October 2009.
2. ^ ^abcde'Download Details: Microsoft Baseline Security Analyzer 2.2 (for IT Professionals)'. Microsoft Download Center. Microsoft Corporation. 6 August 2010. Retrieved 21 November 2009.
3. ^'August 2012 Security Bulletin Webcast Q&A'. Microsoft. Archived from the original on 24 August 2012. Retrieved 20 August 2012.
4. ^'Microsoft Baseline Security Analyzer (MBSA) 2.3&#124MBSA'. Microsoft. Retrieved 12 November 2013.
5. ^'What is Microsoft Baseline Security Analyzer and its uses?'. Microsoft. Retrieved October 5, 2018.

External links[edit]

• Official website