Microsoft Baseline Security Analyzer (MBSA) analyzes Windows systems for common security misconfigurations. MBSA includes a graphical and command line interface that can perform local or remote scans of Windows systems.
MBSA uses a version of HFNetChk to scan for missing hotfixes and service packs for Windows, IIS, and SQL Server. MBSA will create and store individual XML security reports for each computer scanned and will display the reports in the graphical user interface in HTML.
Whats New in version 2.2: * Corrects minor issues and adds optional catalog support.