Microsoft Baseline Security Analyser - Issues
Good Morning, I am running Windows 7 Home Premium on my Dell Inspiron 530S. I have downloaded and installed Microsoft Baseline Security Analyser 2.1 I believe it is good to know that all is OK from a security point of view, and tools such as this are always of great assistance. When I run this tool, I have found a couple of reported "errors" which I do not think are correct. I have attached a copy of the Assessment Report to the foot of this email so you can see my references. In the "Windows Scan Results" section, the report shows that the Guest account is not disabled on this computer. Using Control Panel, User Accounts, it is shown that the Guest Account is OFF. What else can I do to remove this error from the report??? In the same section, the report shows there is incomplete updates. This is not correct - I have done multiple restarts and run the Security Analyser again, and it still shows this error. What can I do to correct this??? In the same section, the report shows that Windows Firewall is disabled and has exceptions configured. It is true that windows Firewall is off, as I have the McAfee Security Centre running and fully configured for all protection. Couldn't the report show that another Firewall is enabled??? Also, what do the "exceptions configured" exactly mean??? In the same section, the report shows that Autologon is not configured on this computer. Whenever I start Windows, automatically my local account (Anderson) is logged on without any intervention on my part. I have this purposely set like this, as I am the only one who really uses this PC for any major processing. Shouldn't this Autologon check report this?? If some answers could be given to the above, I would be most appreciative. Regards, Neil Anderson. Security assessment: Severe Risk (One or more critical checks failed.) Computer name: @HOME\ANDERSON-PC IP address: 122.106.187.52 Security report name: @HOME - ANDERSON-PC (12-01-2010 11-08 AM) Scan date: 12/01/2010 11:08 AM Catalog synchronization date: Security update catalog: Microsoft Update Security Updates Score Issue Result Developer Tools, Runtimes, and Redistributables Security Updates No security updates are missing. Current Update Compliance Score ID Description Maximum Severity Installed MS09-035 Security Update for Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package (KB973923) Moderate Office Security Updates No security updates are missing. Current Update Compliance Score ID Description Maximum Severity Installed 949426 Microsoft Office Accounting 2008 UK Service Pack 1 (KB949426) Installed MS09-060 Security Update for the 2007 Microsoft Office System (KB974234) Important Installed 949426 Microsoft Office Accounting 2008 US Service Pack 1 (KB949426) Installed MS09-024 Security Update for the 2007 Microsoft Office System (KB969559) Important Installed MS09-067 Security Update for Microsoft Office Excel 2007 (KB973593) Important Installed 953195 The 2007 Microsoft Office Suite Service Pack 2 (SP2) Installed MS09-062 Security Update for the 2007 Microsoft Office System (KB972581) Important Installed MS09-017 Security Update for Microsoft PowerPoint 2007 (KB957789) Important Installed MS09-060 Security Update for Microsoft Office Visio Viewer 2007 (KB973709) Critical Installed MS09-027 Security Update for the 2007 Microsoft Office System (KB969613) Important Installed MS09-067 Security Update for the 2007 Microsoft Office System (KB973704) Important SDK Components Security Updates No security updates are missing. Current Update Compliance Score ID Description Maximum Severity Installed MS07-028 Security Update for CAPICOM (KB931906) Critical SQL Server Security Updates No security updates are missing. Current Update Compliance Score ID Description Maximum Severity Installed MS06-061 MSXML 6.0 RTM Security Update (925673) Critical Silverlight Security Updates No security updates are missing. Current Update Compliance Score ID Description Maximum Severity Installed 974331 Update for Microsoft Silverlight (KB974331) Installed 974331 Update for Microsoft Silverlight (KB974331) Windows Security Updates No security updates are missing. Current Update Compliance Score ID Description Maximum Severity Installed MS08-069 Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB954430) Important Installed 890830 Windows Malicious Software Removal Tool - December 2009 (KB890830) Installed MS09-061 Microsoft .NET Framework 1.1 Service Pack 1 Security Update for Windows 2000, Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 (KB953297) Critical Installed 976098 Update for Windows 7 (KB976098) Installed MS09-055 Security Update for ActiveX Killbits for Windows 7 (KB973525) Important Installed 974431 Update for Windows 7 (KB974431) Installed MS09-072 Cumulative Security Update for Internet Explorer 8 for Windows 7 (KB976325) Critical Installed MS09-056 Security Update for Windows 7 (KB974571) Important Installed MS09-059 Security Update for Windows 7 (KB975467) Important Windows Scan Results Administrative Vulnerabilities Score Issue Result Local Account Password Test Some user accounts (3 of 4) have blank or simple passwords, or could not be analyzed. User Weak Password Locked Out Disabled Administrator Weak - Disabled Anderson Weak - - Guest Weak - - ASPNET - - - Guest Account The Guest account is not disabled on this computer. Password Expiration Some user accounts (3 of 4) have non-expiring passwords. User Administrator Anderson Guest ASPNET Incomplete Updates A previous software update installation was not completed. You must restart your computer to finish the installation. If the incomplete installation was a security update, then the computer may be at risk until the computer is restarted. Windows Firewall Windows Firewall is disabled and has exceptions configured. Connection Name Firewall Exceptions All Connections Off Programs, Services Local Area Connection Off* Programs*, Services* File System All hard drives (2) are using the NTFS file system. Drive Letter File System C: NTFS D: NTFS Autologon Autologon is not configured on this computer. Restrict Anonymous Computer is properly restricting anonymous access. Administrators No more than 2 Administrators were found on this computer. User Administrator Anderson Automatic Updates Updates are automatically downloaded and installed on this computer. Regards, Neil Anderson
January 12th, 2010 5:36am

Hi Neil, Thanks for using Microsoft Answers! I'm moving your thread to the Windows 7 Security forums in the TechNet community. They'll be able to better assist you there.Cody C Microsoft Answers Support Engineer Visit our Microsoft Answers Feedback Forum and let us know what you think.
Free Windows Admin Tool Kit Click here and download it now
January 13th, 2010 12:44am

Hi Neil, as we have a specific discussion group regarding Microsoft Baseline Security Analyser, I recommend you post the issue to the following link:Discussions in Security Baseline Analyzerhttp://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.security.baseline_analyzerHope this helps!Sean Zhu - MSFT
January 13th, 2010 9:58am

Sorry Sean, I know now for next time!Cody C Microsoft Answers Support Engineer Visit our Microsoft Answers Feedback Forum and let us know what you think.
Free Windows Admin Tool Kit Click here and download it now
January 14th, 2010 2:13am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics