Baseline Security Analyzer 1.2

[JW]

After running Analyzer, result ststed "two security
updates could not be confirmed". I downloaded the
updates, then re-ran Analyzer. Got same result. I see
both updates in my programs. Should I be concerned?

Thanks

 

[Len Segal]

I had the same thing happen to me here and did the same as you. I wouldn't
be concerned about it.

A MS person will be discussing MBSA 1.2 next week at a meeting that I'm
attending and I will ask him about it, in case there should be some concern.
If I hear differently, I'll post another reply accordingly here.

 

[techguru100]

It appears that any of the following may be true:

1. You did not reboot after each installation (when
prompted to click finish)
2. The hotfix setup progs are not writing the registry
correctly.
3. Affected files to be replaced by hotfixes are marked
with Read-Only, or Administrators group does not have full
permissions.

 

[Len Segal]

WayuU,

I believe you! If you and the OP both go to a ng that was setup specifically
for issues about the MBSA tool you will see a lot of these quesiotns and a
good "back and forth" with one of the MS Security support people. The issues
you raised and the OP are totally "legit" and indicate issues with the tool,
not our systems! It's still a good tool, but not perfect and thus requires
the user to have some good knowledge aobut their system to avoid tilting at
windmills.

microsoft.public.security.baseline_analyzer newsgroup is the place this is
all discussed.

--

Regards,
Len Segal, MCP
Microsoft - MVP
--------------
My reply address is intentionally wrong to reduce SPAM Email.
NOTE: We do not respond to unsolicited Email support questions,
please post questions in newsgroup.

I can GARANTEE u that there is NO problem. I know exactly what I do and

I'm also a security specialist but since that don't have much to do with
this I'll just plain tell you that I have a 100% new clean install of XP
and that machine I keep SUPER clean with barely any installs on. I have all
the importans critical updates/patches from MS and I ALWAYS get that result
too.

 

[Guest]

Thx for confirming it

 

[Roger Abell]

For security update checking, one can always get more detailed
information out from MBSA by dropping to the cmd line and using
the older, included HfNetChk interface.
cd to where MBSA is installed and then try
mbsacli -hf -?
a common command for sec patch scan info is
mbsacli -hf -v