IS3340-WINDOWS SECURITY | Minimizing Recovery Time Strategies | Unit 6 Assignment 1 | | | 5/5/2014 |

|

This document outlines the required steps to follow, in-order to properly scan the necessary servers and workstations in the Ken 7 Windows Limited Domain for security vulnerabilities.

1) Acquire and install MBSA(Microsoft Baseline Security Anaylizer)
•Download MBSA. Download MBSA from the MBSA home page, and then install it to the default directory.
•Updates for MBSA. If both the computer you will be scanning and the computer with MBSA installed have Internet access, the latest security catalog (.cab file), authentication files, and WUA installer files will be automatically downloaded, if needed. If either the target computer or the computer with MBSA installed does not have Internet access, download the following files and place them in the C:\Documents and Settings\<username>\Local Settings\Application Data\Microsoft\MBSA\2.0\Cache\ directory on the computer that is performing the scan.

2) Scan computers
Run MBSA and clear the Check for security updates check box when performing the scan.
Using the Graphical Interface Tool
The following procedure describes how to use the MBSA GUI tool.
To use the MBSA GUI tool to scan for updates and patches
1. On the Programs menu, click Microsoft Baseline Security Analyzer.
2. Click Scan a computer.
3. Make sure that the following options are not selected, and then click Start scan. * Check for Windows administrative vulnerabilities * Check for weak passwords * Check for IIS administrative vulnerabilities * Check for SQL administrative vulnerabilities
Using the Graphical Interface Tool
1. On the Programs menu, click Microsoft Baseline Security Analyzer.
2. Click Scan a computer.
3. Make sure that the following options are not selected, and then click Start scan.