Creating the Secure Managed Desktop: Using Group Policy, SoftGrid, Microsoft Deployment Toolkit, and Other Management Tools

8.13. The Microsoft Baseline Security Analyzer

Patching is a critically important component of securing a Windows network, but as we've said before in this chapter, there's more to security than just getting patches onto clients. Another major component of security is in ensuring that clients are configured in the best way possible to ensure exploits can't make use of unsecured components. WSUS alone handles only the patch management component of security. In order to view more information about individual security configurations, other tools are required.

One tool that can check for certain security configurations is the Microsoft Baseline Security Analyzer, as shown in Figure 8.12, which is downloadable from the Microsoft website at http://tinyurl.com/2e5fe ...