Re: New MS Baseline Security Analyzer 2.0

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 07/13/05 

Date: Wed, 13 Jul 2005 14:12:58 +0200

Bummer_Nomore_quick_Hfnetchk_switch wrote:

> This new version dropped the /hf and /v switches so I can no
> longer do quick checks for patches for SQL, OS, XML, MDAC, etc.
> For stand alone computers not using update services like SUS, MU,
> etc, those switches were nice features for putting into a batch
> file to just check for needed Microsoft updates then output to a
> text file.
>
> Does Microsoft have any alternatives to easily scan for above
> patches for standalone computers? I know that
> http://www.shavlik.com has full version of hfnetchk but I don't
> believe I should have to pay for checking for Microsoft updates.
Hi,

For MBSA 2.0, Mbsacli.exe /xmlout is what you need to use.

For a couple of MBSACLI 2.0 /xmlout parsing scripts (one by me), take
a look at this thread:
http://groups.google.co.uk/group/microsoft.public.security.baseline_analyzer/browse_frm/thread/0a376c8e8706cadc/5f39f26861db0c03#5f39f26861db0c03

If you want to copy/paste my script, you should do it from this link
to avoid Google encoding issues:
http://groups.google.co.uk/group/microsoft.public.security.baseline_analyzer/msg/0136a0ce0a233c61?dmode=source&hl=en

Note that Microsoft Update Agent 2.0 is required for MBSACLI 2.0,
so if your computers haven't got it yet (from the latest Windows
Update version or a WSUS server or a MBSA installation that have
installed it), you can download and install it from here:

For x86-based computers (WindowsUpdateAgent20-x86.exe)
http://go.microsoft.com/fwlink/?LinkId=43264

(will work for Win2k SP3 and SP4, WinXP RTM/SP1/SP2, and
Win2k3 RTM/SP1)

For x64-based computers (WindowsUpdateAgent20-x64.exe):
http://go.microsoft.com/fwlink/?LinkId=43265

Unattended installation command line switches:

WindowsUpdateAgent20-x86.exe /quiet /norestart 

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

Relevant Pages

  • Re: Service Pack Install Script
    ... I'm using a script to deploy windows 2000 sp4 to a number of computers on an nt4 domain by copying ... Is there a way of getting the return value of the installation rather than of the install.cmd? ... torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: http://www.microsoft.com/technet/scriptcenter/default.mspx. ...
    (microsoft.public.scripting.vbscript)
  • Re: 2 Comps fail within days, same problem, help
    ... Both have the latest Microsoft updates ... Both refused to boot up, the computers are completely dead, the green ... Norton and all anti-virus programs are an utter waste of time. ... That's bollocks, a properly configured machine is uninfectable other than by deliberate action by the user. ...
    (uk.legal)
  • Re: 2 Comps fail within days, same problem, help
    ... Both have the latest Microsoft updates ... Both refused to boot up, the computers are completely dead, the green ... anti-virus programs are an utter waste of time. ... That's bollocks, a properly configured machine is uninfectable other than ...
    (uk.legal)
  • Re: SP2??
    ... If they were to offer an IE popup blocker that was a simple ... I routinely run security checks/attacks against my computers ... > I'm 'into' computers more than the average user by a pretty fair bit. ... > against Microsoft updates. ...
    (microsoft.public.windowsxp.general)
  • Re: 2 Comps fail within days, same problem, help
    ... Both have the latest Microsoft updates ... Both refused to boot up, the computers are completely dead, the green ... Norton and all anti-virus programs are an utter waste of time. ...
    (uk.legal)