8.13. The Microsoft Baseline Security Analyzer

Patching is a critically important component of securing a Windows network, but as we've said before in this chapter, there's more to security than just getting patches onto clients. Another major component of security is in ensuring that clients are configured in the best way possible to ensure exploits can't make use of unsecured components. WSUS alone handles only the patch management component of security. In order to view more information about individual security configurations, other tools are required.

One tool that can check for certain security configurations is the Microsoft Baseline Security Analyzer, as shown in Figure 8.12, which is downloadable from the Microsoft website at http://tinyurl.com/2e5fe ...

Get Creating the Secure Managed Desktop: Using Group Policy, SoftGrid, Microsoft Deployment Toolkit, and Other Management Tools now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.