Microsoft Baseline Security Analyzer

[SteveC]

What it does: Scan a single computer, or multiple computers, on your network for possible security problems and missing security updates in several Microsoft products.

Runs on: Windows 2000, Windows XP, Windows Server 2003

Checks:

• Windows NT (w/SP4 or later), Windows 2000, Windows XP, Windows Server 2003
  Office 2000, Office XP
  Internet Explorer 5.01 and later
  IIS 4.0 and IIS 5.0
  SQL 7.0 and 2000
  Exchange 5.5 and 2000
  Windows Media Player 6.4 and later

Where to download: From Microsoft.

 

[Mercutio]

As long as you're bringing it up, hfnetchk.exe is probably that package's most useful tool.

It batch queries Windows machines for version numbers on most Microsoft software, so you can see what patches need to be installed where.

 

[Fushigi]

Security Operations Guide for Windows 2000

 

[NRG = mc²]

Thanks