MBSA 2.1 RELEASED

MBSA 2.1 RELEASED

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
MBSA 2.1 RELEASED Doug Neal [MSFT] 05-05-2008
  `--> Re: MBSA 2.1 RELEASED Doug Neal [MSFT...07-09-2008
Posted by Doug Neal [MSFT] on May 5, 2008, 7:59 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
The latest version of Microsoft Baseline Security Analyzer 2.1 has been
released for immediate download at
http://www.microsoft.com/downloads/details.aspx?FamilyID=F32921AF-9DBE-4DCE-889E-ECF997EB18E9.
Please see the MBSA Home Page (www.microsoft.com/mbsa) for more details.



MBSA 2.1

Microsoft Baseline Security Analyzer (MBSA) is an easy-to-use tool that
helps small and medium businesses determine their security state in
accordance with Microsoft security standards. Built on the Windows Update
Agent and Microsoft Update infrastructure, MBSA ensures consistency with
other Microsoft management products including Microsoft Update (MU), Windows
Server Update Services (WSUS), Systems Management Server (SMS), System
Center Configuration Manager (SCCM) 2007, and Small Business Server (SBS).
Used by many leading third party security vendors and security auditors,
MBSA on average scans over 3 million computers each week. Join the thousands
of users that depend on MBSA for analyzing their security and security
update compliance.





New Features found in MBSA 2.1:

.
Support for Windows Vista and Windows Server 2008

.
Updated graphical user interface

.
Full support for 64-bit platforms and vulnerability assessment (VA)
checks against 64-bit platforms and components.

.
Improved support for Windows XP Embedded platform

.
Improved support for SQL Server 2005 vulnerability assessment (VA)
checks

.
Automatic Microsoft Update registration and agent update (if selected)
using the graphical interface or from the command-line tool using the /ia
feature

.
New feature to output completed scan reports to a user-selected
directory path or network share (command-line /rd feature)

.
Windows Server Update Services 2.0 and 3.0 compatibility




Noteworthy changes for users of earlier versions of MBSA:



By customer request, the automatic distribution of the latest Windows Update
Agent (WUA) client to client computers when scanned by MBSA has been
disabled by default in MBSA 2.1. MBSA 2.1 will not install any updated
Windows Update Agent binaries on a target computer without consent from the
administrator using the MBSA scan tool. This may prevent MBSA from
successfully scanning computers that don't have the latest WUA client
installed. To increase the number of computers MBSA can assess,
Administrators and security auditors are encouraged to select the option to
'Configure computers for Microsoft Update and scanning prerequisites' which
was the default behavior in earlier versions of MBSA. The corresponding
command-line feature to automatically update the WUA client has been added
with the new /ia command-line option.



Customers also requested the ability to output completed MBSA scan reports
to a directory or network share of their choosing. This has been
implemented in the command-line version of MBSA (mbsacli) only (not the
graphical version) using the new /rd feature.



Upgrade to MBSA 2.1 today. If you have any questions regarding MBSA, feel
free to post them to the MBSA newsgroup at
microsoft.public.security.baseline_analyzer.


--
--

Doug Neal [MSFT]
dugn@online.microsoft.com

This posting is provided "AS IS" with no warranties, and confers no rights.

If newsgroup discussion with experts and MVPs is unable to solve a problem
to your satisfaction, feel free to contact PSS for support on the Microsoft
Baseline Security Analyzer (MBSA). Information is available at the following
link:
http://support.microsoft.com/default.aspx

This e-mail address does not receive e-mail, but is used for newsgroup
postings only.



Posted by Jerry on May 5, 2008, 11:28 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
But when downwloaded and installed it shows as version 2.1 beta 2

> The latest version of Microsoft Baseline Security Analyzer 2.1 has been
> released for immediate download at
>
http://www.microsoft.com/downloads/details.aspx?FamilyID=F32921AF-9DBE-4DCE-889E-ECF997EB18E9.
> Please see the MBSA Home Page (www.microsoft.com/mbsa) for more details.
>
>
>
> MBSA 2.1
>
> Microsoft Baseline Security Analyzer (MBSA) is an easy-to-use tool that
> helps small and medium businesses determine their security state in
> accordance with Microsoft security standards. Built on the Windows Update
> Agent and Microsoft Update infrastructure, MBSA ensures consistency with
> other Microsoft management products including Microsoft Update (MU),
> Windows Server Update Services (WSUS), Systems Management Server (SMS),
> System Center Configuration Manager (SCCM) 2007, and Small Business Server
> (SBS). Used by many leading third party security vendors and security
> auditors, MBSA on average scans over 3 million computers each week. Join
> the thousands of users that depend on MBSA for analyzing their security
> and security update compliance.
>
>
>
>
>
> New Features found in MBSA 2.1:
>
> .
> Support for Windows Vista and Windows Server 2008
>
> .
> Updated graphical user interface
>
> .
> Full support for 64-bit platforms and vulnerability assessment (VA)
> checks against 64-bit platforms and components.
>
> .
> Improved support for Windows XP Embedded platform
>
> .
> Improved support for SQL Server 2005 vulnerability assessment (VA)
> checks
>
> .
> Automatic Microsoft Update registration and agent update (if selected)
> using the graphical interface or from the command-line tool using the /ia
> feature
>
> .
> New feature to output completed scan reports to a user-selected
> directory path or network share (command-line /rd feature)
>
> .
> Windows Server Update Services 2.0 and 3.0 compatibility
>
>
>
>
> Noteworthy changes for users of earlier versions of MBSA:
>
>
>
> By customer request, the automatic distribution of the latest Windows
> Update Agent (WUA) client to client computers when scanned by MBSA has
> been disabled by default in MBSA 2.1. MBSA 2.1 will not install any
> updated Windows Update Agent binaries on a target computer without consent
> from the administrator using the MBSA scan tool. This may prevent MBSA
> from successfully scanning computers that don't have the latest WUA client
> installed. To increase the number of computers MBSA can assess,
> Administrators and security auditors are encouraged to select the option
> to 'Configure computers for Microsoft Update and scanning prerequisites'
> which was the default behavior in earlier versions of MBSA. The
> corresponding command-line feature to automatically update the WUA client
> has been added with the new /ia command-line option.
>
>
>
> Customers also requested the ability to output completed MBSA scan reports
> to a directory or network share of their choosing. This has been
> implemented in the command-line version of MBSA (mbsacli) only (not the
> graphical version) using the new /rd feature.
>
>
>
> Upgrade to MBSA 2.1 today. If you have any questions regarding MBSA, feel
> free to post them to the MBSA newsgroup at
> microsoft.public.security.baseline_analyzer.
>
>
> --
> --
>
> Doug Neal [MSFT]
> dugn@online.microsoft.com
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> If newsgroup discussion with experts and MVPs is unable to solve a problem
> to your satisfaction, feel free to contact PSS for support on the
> Microsoft
> Baseline Security Analyzer (MBSA). Information is available at the
> following link:
> http://support.microsoft.com/default.aspx
>
> This e-mail address does not receive e-mail, but is used for newsgroup
> postings only.
>



Posted by Doug Neal [MSFT] on May 6, 2008, 3:31 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Which version did you download (x86/x64), which locale and where did it
indicate 'beta'?

--
--

Doug Neal [MSFT]
dugn@online.microsoft.com

This posting is provided "AS IS" with no warranties, and confers no rights.

If newsgroup discussion with experts and MVPs is unable to solve a problem
to your satisfaction, feel free to contact PSS for support on the Microsoft
Baseline Security Analyzer (MBSA). Information is available at the following
link:
http://support.microsoft.com/default.aspx

This e-mail address does not receive e-mail, but is used for newsgroup
postings only.
> But when downwloaded and installed it shows as version 2.1 beta 2
>
>> The latest version of Microsoft Baseline Security Analyzer 2.1 has been
>> released for immediate download at
>>
http://www.microsoft.com/downloads/details.aspx?FamilyID=F32921AF-9DBE-4DCE-889E-ECF997EB18E9.
>> Please see the MBSA Home Page (www.microsoft.com/mbsa) for more details.
>>
>>
>>
>> MBSA 2.1
>>
>> Microsoft Baseline Security Analyzer (MBSA) is an easy-to-use tool that
>> helps small and medium businesses determine their security state in
>> accordance with Microsoft security standards. Built on the Windows Update
>> Agent and Microsoft Update infrastructure, MBSA ensures consistency with
>> other Microsoft management products including Microsoft Update (MU),
>> Windows Server Update Services (WSUS), Systems Management Server (SMS),
>> System Center Configuration Manager (SCCM) 2007, and Small Business
>> Server (SBS). Used by many leading third party security vendors and
>> security auditors, MBSA on average scans over 3 million computers each
>> week. Join the thousands of users that depend on MBSA for analyzing their
>> security and security update compliance.
>>
>>
>>
>>
>>
>> New Features found in MBSA 2.1:
>>
>> .
>> Support for Windows Vista and Windows Server 2008
>>
>> .
>> Updated graphical user interface
>>
>> .
>> Full support for 64-bit platforms and vulnerability assessment (VA)
>> checks against 64-bit platforms and components.
>>
>> .
>> Improved support for Windows XP Embedded platform
>>
>> .
>> Improved support for SQL Server 2005 vulnerability assessment (VA)
>> checks
>>
>> .
>> Automatic Microsoft Update registration and agent update (if
>> selected) using the graphical interface or from the command-line tool
>> using the /ia feature
>>
>> .
>> New feature to output completed scan reports to a user-selected
>> directory path or network share (command-line /rd feature)
>>
>> .
>> Windows Server Update Services 2.0 and 3.0 compatibility
>>
>>
>>
>>
>> Noteworthy changes for users of earlier versions of MBSA:
>>
>>
>>
>> By customer request, the automatic distribution of the latest Windows
>> Update Agent (WUA) client to client computers when scanned by MBSA has
>> been disabled by default in MBSA 2.1. MBSA 2.1 will not install any
>> updated Windows Update Agent binaries on a target computer without
>> consent from the administrator using the MBSA scan tool. This may
>> prevent MBSA from successfully scanning computers that don't have the
>> latest WUA client installed. To increase the number of computers MBSA can
>> assess, Administrators and security auditors are encouraged to select the
>> option to 'Configure computers for Microsoft Update and scanning
>> prerequisites' which was the default behavior in earlier versions of
>> MBSA. The corresponding command-line feature to automatically update the
>> WUA client has been added with the new /ia command-line option.
>>
>>
>>
>> Customers also requested the ability to output completed MBSA scan
>> reports to a directory or network share of their choosing. This has been
>> implemented in the command-line version of MBSA (mbsacli) only (not the
>> graphical version) using the new /rd feature.
>>
>>
>>
>> Upgrade to MBSA 2.1 today. If you have any questions regarding MBSA,
>> feel free to post them to the MBSA newsgroup at
>> microsoft.public.security.baseline_analyzer.
>>
>>
>> --
>> --
>>
>> Doug Neal [MSFT]
>> dugn@online.microsoft.com
>>
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> If newsgroup discussion with experts and MVPs is unable to solve a
>> problem
>> to your satisfaction, feel free to contact PSS for support on the
>> Microsoft
>> Baseline Security Analyzer (MBSA). Information is available at the
>> following link:
>> http://support.microsoft.com/default.aspx
>>
>> This e-mail address does not receive e-mail, but is used for newsgroup
>> postings only.
>>
>
>



Posted by Jerry on May 7, 2008, 11:28 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I got it from the url you gave above. The version number was visible as sson
as it was installed and started - beta - as I posted.

> Which version did you download (x86/x64), which locale and where did it
> indicate 'beta'?
>
> --
> --
>
> Doug Neal [MSFT]
> dugn@online.microsoft.com
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> If newsgroup discussion with experts and MVPs is unable to solve a problem
> to your satisfaction, feel free to contact PSS for support on the
> Microsoft
> Baseline Security Analyzer (MBSA). Information is available at the
> following link:
> http://support.microsoft.com/default.aspx
>
> This e-mail address does not receive e-mail, but is used for newsgroup
> postings only.
>> But when downwloaded and installed it shows as version 2.1 beta 2
>>
>>> The latest version of Microsoft Baseline Security Analyzer 2.1 has been
>>> released for immediate download at
>>>
http://www.microsoft.com/downloads/details.aspx?FamilyID=F32921AF-9DBE-4DCE-889E-ECF997EB18E9.
>>> Please see the MBSA Home Page (www.microsoft.com/mbsa) for more details.
>>>
>>>
>>>
>>> MBSA 2.1
>>>
>>> Microsoft Baseline Security Analyzer (MBSA) is an easy-to-use tool that
>>> helps small and medium businesses determine their security state in
>>> accordance with Microsoft security standards. Built on the Windows
>>> Update Agent and Microsoft Update infrastructure, MBSA ensures
>>> consistency with other Microsoft management products including Microsoft
>>> Update (MU), Windows Server Update Services (WSUS), Systems Management
>>> Server (SMS), System Center Configuration Manager (SCCM) 2007, and Small
>>> Business Server (SBS). Used by many leading third party security vendors
>>> and security auditors, MBSA on average scans over 3 million computers
>>> each week. Join the thousands of users that depend on MBSA for analyzing
>>> their security and security update compliance.
>>>
>>>
>>>
>>>
>>>
>>> New Features found in MBSA 2.1:
>>>
>>> .
>>> Support for Windows Vista and Windows Server 2008
>>>
>>> .
>>> Updated graphical user interface
>>>
>>> .
>>> Full support for 64-bit platforms and vulnerability assessment (VA)
>>> checks against 64-bit platforms and components.
>>>
>>> .
>>> Improved support for Windows XP Embedded platform
>>>
>>> .
>>> Improved support for SQL Server 2005 vulnerability assessment (VA)
>>> checks
>>>
>>> .
>>> Automatic Microsoft Update registration and agent update (if
>>> selected) using the graphical interface or from the command-line tool
>>> using the /ia feature
>>>
>>> .
>>> New feature to output completed scan reports to a user-selected
>>> directory path or network share (command-line /rd feature)
>>>
>>> .
>>> Windows Server Update Services 2.0 and 3.0 compatibility
>>>
>>>
>>>
>>>
>>> Noteworthy changes for users of earlier versions of MBSA:
>>>
>>>
>>>
>>> By customer request, the automatic distribution of the latest Windows
>>> Update Agent (WUA) client to client computers when scanned by MBSA has
>>> been disabled by default in MBSA 2.1. MBSA 2.1 will not install any
>>> updated Windows Update Agent binaries on a target computer without
>>> consent from the administrator using the MBSA scan tool. This may
>>> prevent MBSA from successfully scanning computers that don't have the
>>> latest WUA client installed. To increase the number of computers MBSA
>>> can assess, Administrators and security auditors are encouraged to
>>> select the option to 'Configure computers for Microsoft Update and
>>> scanning prerequisites' which was the default behavior in earlier
>>> versions of MBSA. The corresponding command-line feature to
>>> automatically update the WUA client has been added with the new /ia
>>> command-line option.
>>>
>>>
>>>
>>> Customers also requested the ability to output completed MBSA scan
>>> reports to a directory or network share of their choosing. This has
>>> been implemented in the command-line version of MBSA (mbsacli) only (not
>>> the graphical version) using the new /rd feature.
>>>
>>>
>>>
>>> Upgrade to MBSA 2.1 today. If you have any questions regarding MBSA,
>>> feel free to post them to the MBSA newsgroup at
>>> microsoft.public.security.baseline_analyzer.
>>>
>>>
>>> --
>>> --
>>>
>>> Doug Neal [MSFT]
>>> dugn@online.microsoft.com
>>>
>>> This posting is provided "AS IS" with no warranties, and confers no
>>> rights.
>>>
>>> If newsgroup discussion with experts and MVPs is unable to solve a
>>> problem
>>> to your satisfaction, feel free to contact PSS for support on the
>>> Microsoft
>>> Baseline Security Analyzer (MBSA). Information is available at the
>>> following link:
>>> http://support.microsoft.com/default.aspx
>>>
>>> This e-mail address does not receive e-mail, but is used for newsgroup
>>> postings only.
>>>
>>
>>
>
>



Posted by =?Utf-8?B?S29ucmFkIEhlaW4=?= on May 22, 2008, 4:02 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello Doug,

can you please tell me how long the MBSA Version 2.01 will be suppoted by
Microsoft ? In the Past we had to changed from 2.0 to 2.01.

The new features we do not need at this time, so it is important for us to
know, how long will be MBSA 2.01 will be supported.

Thanks in advanced

Konrad Hein



"Doug Neal [MSFT]" wrote:

> The latest version of Microsoft Baseline Security Analyzer 2.1 has been
> released for immediate download at
>
http://www.microsoft.com/downloads/details.aspx?FamilyID=F32921AF-9DBE-4DCE-889E-ECF997EB18E9.
> Please see the MBSA Home Page (www.microsoft.com/mbsa) for more details.
>
>
>
> MBSA 2.1
>
> Microsoft Baseline Security Analyzer (MBSA) is an easy-to-use tool that
> helps small and medium businesses determine their security state in
> accordance with Microsoft security standards. Built on the Windows Update
> Agent and Microsoft Update infrastructure, MBSA ensures consistency with
> other Microsoft management products including Microsoft Update (MU), Windows
> Server Update Services (WSUS), Systems Management Server (SMS), System
> Center Configuration Manager (SCCM) 2007, and Small Business Server (SBS).
> Used by many leading third party security vendors and security auditors,
> MBSA on average scans over 3 million computers each week. Join the thousands
> of users that depend on MBSA for analyzing their security and security
> update compliance.
>
>
>
>
>
> New Features found in MBSA 2.1:
>
> .
> Support for Windows Vista and Windows Server 2008
>
> .
> Updated graphical user interface
>
> .
> Full support for 64-bit platforms and vulnerability assessment (VA)
> checks against 64-bit platforms and components.
>
> .
> Improved support for Windows XP Embedded platform
>
> .
> Improved support for SQL Server 2005 vulnerability assessment (VA)
> checks
>
> .
> Automatic Microsoft Update registration and agent update (if selected)
> using the graphical interface or from the command-line tool using the /ia
> feature
>
> .
> New feature to output completed scan reports to a user-selected
> directory path or network share (command-line /rd feature)
>
> .
> Windows Server Update Services 2.0 and 3.0 compatibility
>
>
>
>
> Noteworthy changes for users of earlier versions of MBSA:
>
>
>
> By customer request, the automatic distribution of the latest Windows Update
> Agent (WUA) client to client computers when scanned by MBSA has been
> disabled by default in MBSA 2.1. MBSA 2.1 will not install any updated
> Windows Update Agent binaries on a target computer without consent from the
> administrator using the MBSA scan tool. This may prevent MBSA from
> successfully scanning computers that don't have the latest WUA client
> installed. To increase the number of computers MBSA can assess,
> Administrators and security auditors are encouraged to select the option to
> 'Configure computers for Microsoft Update and scanning prerequisites' which
> was the default behavior in earlier versions of MBSA. The corresponding
> command-line feature to automatically update the WUA client has been added
> with the new /ia command-line option.
>
>
>
> Customers also requested the ability to output completed MBSA scan reports
> to a directory or network share of their choosing. This has been
> implemented in the command-line version of MBSA (mbsacli) only (not the
> graphical version) using the new /rd feature.
>
>
>
> Upgrade to MBSA 2.1 today. If you have any questions regarding MBSA, feel
> free to post them to the MBSA newsgroup at
> microsoft.public.security.baseline_analyzer.
>
>
> --
> --
>
> Doug Neal [MSFT]
> dugn@online.microsoft.com
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> If newsgroup discussion with experts and MVPs is unable to solve a problem
> to your satisfaction, feel free to contact PSS for support on the Microsoft
> Baseline Security Analyzer (MBSA). Information is available at the following
> link:
> http://support.microsoft.com/default.aspx
>
> This e-mail address does not receive e-mail, but is used for newsgroup
> postings only.
>
>
>

Similar ThreadsPosted
MBSA 2.0 offline catalog discontinued - MBSA 2.0 will report "The catalog file is damaged or an invalid catalog" March 27, 2007, 9:07 pm
MBSA 2.0 August 17, 2005, 6:12 am
MBSA.EXE November 21, 2006, 7:36 pm
re MBSA March 28, 2007, 6:58 am
Nessus vs MBSA July 27, 2005, 11:57 am
MBSA 1.2.1 End of Life Q&A February 17, 2006, 2:07 pm
MBSA 2.1 Beta 2 Now Available May 9, 2007, 6:25 pm
MBSA 1.2.1 end-of-life statement February 14, 2006, 1:25 pm
MS07-002 Not Detected by MBSA 2? January 10, 2007, 3:07 pm
How does MBSA collect it's data? September 4, 2007, 3:36 am

The site map in XML format XML site map

Contact Us | Privacy Policy