Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. Database & SysAdmin
  3. System Admin
  4. Anyone use (MBSA) Microsoft Baseline Security Analyzer?

Anyone use (MBSA) Microsoft Baseline Security Analyzer?

Scheduled Pinned Locked Moved System Admin
csssecurityhelpquestionannouncement
9 Posts 4 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • J Offline
    J Offline
    John M Drescher
    wrote on last edited by
    #1

    I apply all the latest patches from windows update and it still says all my pcs are severe risks. Also is it possible to have it ignore the Password never expires problem. I tend to believe if you have people change their password too frequently they will forget it and require it to be reset frequently. After getting tired of this they just tape it to their pc or place a sticky note somewhere on their desk which is way less security than letting them keep their same password... John

    M R N J 4 Replies Last reply
    0
    • J John M Drescher

      I apply all the latest patches from windows update and it still says all my pcs are severe risks. Also is it possible to have it ignore the Password never expires problem. I tend to believe if you have people change their password too frequently they will forget it and require it to be reset frequently. After getting tired of this they just tape it to their pc or place a sticky note somewhere on their desk which is way less security than letting them keep their same password... John

      M Offline
      M Offline
      Matt Newman
      wrote on last edited by
      #2

      I'm downloading it now, I'll see what I can figure out [EDIT]Some warnings are custom settings. For example my Outlook Security is set to Custom (I allow only trusted domains) and it would prefer I were on Medium instead. As for the never expires password, it doesn't even check on XP Pro not on a domain, so I'm not sure about that. As for the updates, there are a few that I have never seen on Windows Update.[/EDIT] Matt Newman
      Sonork: 100:11179 "Jokes should at least try to be intelligent - this is just toilet humor" - Heath Stewart

      1 Reply Last reply
      0
      • J John M Drescher

        I apply all the latest patches from windows update and it still says all my pcs are severe risks. Also is it possible to have it ignore the Password never expires problem. I tend to believe if you have people change their password too frequently they will forget it and require it to be reset frequently. After getting tired of this they just tape it to their pc or place a sticky note somewhere on their desk which is way less security than letting them keep their same password... John

        R Offline
        R Offline
        Roger Wright
        wrote on last edited by
        #3

        I've used it, after applying everything I can think of to protect it, and after installing all the available security patches. It still reports severe risk. I guess they know best... I suspect that the only way to make a server secure by the standards of this tool is to disconnect all the NICs and modems.

        "Welcome to Arizona!
        Drive Nice - We're Armed..."
        - Proposed Sign at CA/AZ Border

        J 1 Reply Last reply
        0
        • R Roger Wright

          I've used it, after applying everything I can think of to protect it, and after installing all the available security patches. It still reports severe risk. I guess they know best... I suspect that the only way to make a server secure by the standards of this tool is to disconnect all the NICs and modems.

          "Welcome to Arizona!
          Drive Nice - We're Armed..."
          - Proposed Sign at CA/AZ Border

          J Offline
          J Offline
          John M Drescher
          wrote on last edited by
          #4

          Roger Wright wrote: It still reports severe risk. I guess they know best... Thanks. I was wondering if it was just me... John

          M 1 Reply Last reply
          0
          • J John M Drescher

            Roger Wright wrote: It still reports severe risk. I guess they know best... Thanks. I was wondering if it was just me... John

            M Offline
            M Offline
            Matt Newman
            wrote on last edited by
            #5

            I managed to get mine down to potential risk. The only reason it was that was because it couldn't determine if some updates were installed (they were) and my Office 2000 Macro settings were too low (I don't have Office 2000 installed :suss: ) Matt Newman
            Sonork: 100:11179 "Jokes should at least try to be intelligent - this is just toilet humor" - Heath Stewart

            N 1 Reply Last reply
            0
            • J John M Drescher

              I apply all the latest patches from windows update and it still says all my pcs are severe risks. Also is it possible to have it ignore the Password never expires problem. I tend to believe if you have people change their password too frequently they will forget it and require it to be reset frequently. After getting tired of this they just tape it to their pc or place a sticky note somewhere on their desk which is way less security than letting them keep their same password... John

              N Offline
              N Offline
              Navin
              wrote on last edited by
              #6

              They realize that there are security problems inherent in the OS, I suppose. :-D "When a man sits with a pretty girl for an hour, it seems like a minute. But let him sit on a hot stove for a minute and it's longer than any hour. That's relativity." - Albert Einstein

              1 Reply Last reply
              0
              • M Matt Newman

                I managed to get mine down to potential risk. The only reason it was that was because it couldn't determine if some updates were installed (they were) and my Office 2000 Macro settings were too low (I don't have Office 2000 installed :suss: ) Matt Newman
                Sonork: 100:11179 "Jokes should at least try to be intelligent - this is just toilet humor" - Heath Stewart

                N Offline
                N Offline
                Navin
                wrote on last edited by
                #7

                Matt Newman wrote: (MBSA) Microsoft Baseline Security Analyzer From the likes of this thread, this sounds like another winner of an app to me. :rolleyes: "When a man sits with a pretty girl for an hour, it seems like a minute. But let him sit on a hot stove for a minute and it's longer than any hour. That's relativity." - Albert Einstein

                M 1 Reply Last reply
                0
                • N Navin

                  Matt Newman wrote: (MBSA) Microsoft Baseline Security Analyzer From the likes of this thread, this sounds like another winner of an app to me. :rolleyes: "When a man sits with a pretty girl for an hour, it seems like a minute. But let him sit on a hot stove for a minute and it's longer than any hour. That's relativity." - Albert Einstein

                  M Offline
                  M Offline
                  Matt Newman
                  wrote on last edited by
                  #8

                  Navin wrote: From the likes of this thread, this sounds like another winner of an app to me. Its nice because it points out things I normally wouldn't think of, but it kind of craps out with beta-ware and previously lingering unistalled software reg keys Matt Newman
                  Sonork: 100:11179 "Jokes should at least try to be intelligent - this is just toilet humor" - Heath Stewart

                  1 Reply Last reply
                  0
                  • J John M Drescher

                    I apply all the latest patches from windows update and it still says all my pcs are severe risks. Also is it possible to have it ignore the Password never expires problem. I tend to believe if you have people change their password too frequently they will forget it and require it to be reset frequently. After getting tired of this they just tape it to their pc or place a sticky note somewhere on their desk which is way less security than letting them keep their same password... John

                    J Offline
                    J Offline
                    John M Drescher
                    wrote on last edited by
                    #9

                    Thanks for all who answered... So it is not just me... John

                    1 Reply Last reply
                    0
                    Reply
                    • Reply as topic
                    Log in to reply
                    • Oldest to Newest
                    • Newest to Oldest
                    • Most Votes


                    • Login

                    • Don't have an account? Register

                    • Login or register to search.
                    • First post
                      Last post
                    0
                    • Categories
                    • Recent
                    • Tags
                    • Popular
                    • World
                    • Users
                    • Groups