Thread: How Check the system for security vulnerabilities and misconfigurations

Although the automatic update function is activated, you really can't rely on It. Have all Important updates and mainly hotfixes been Installed for Windows? Or are there still any vulnerabilities?

With the Baseline Security Analyzer, Microsoft offers a free of cost tool for administrators as well as private users. It checks Windows and many other Microsoft programs such as Office, IE or servers for missing updates, hotfixes and vulnerabilities and generates an XML report. You can download the program free of cost. In the search field type 'MBSA' and follow the link to download the file. For installation, open the MSI file and follow the set-up.

Then, start the tool. The first page refers to a new version. However, that is not available since MBSA 2.1 is still up-to-date. Follow the 'Scan a computer' link. The name of your own computer is already preset under 'Computer Name'. Leave the other options in their standard setting and click 'Start Search'. The tool first loads all the latest security information from the Internet and then checks your computer. This process takes several minutes. The concluding report shows the components that are correctly configured, the updates that are missing and where unnecessary security risks are lurking, are divided into categories.

Even though Windows automatically takes care of some updates, it is likely that you have still not installed some updates or service packs for Office. For every test result, you can open a website with detailed information using the 'Subject of Verification' link. The 'Result Details' link shows which settings are right and individual updates that are missing. Here, you will also find links for the required downloads. If service packs are missing, first install these and then conduct the test again. If individual updates are still missing, you can separately install these.