Microsoft Baseline Security Analyzer 2

Security assessment:
Severe Risk (One or more critical checks failed.)

Computer name: OSIPTEL\SRVTS01
IP address: 192.168.200.119
Security report name: OSIPTEL - SRVTS01 (01-09-2010 05-46 PM)
Scan date: 01/09/2010 05:46 PM
Catalog synchronization
date:
Security update catalog: Microsoft Update
Security Updates
Score Issue Result

Developer 1 security updates are missing.
Tools,
Runtimes, and Security Updates
Redistributables Score ID Description Maximum
Security Severity
Updates
Missing MS09-035 Security Update for Microsoft Visual C++ 2008 Redistributable Package (KB973924) Moderate
Office Security 3 security updates are missing. 3 service packs or update rollups are missing.
Updates
Security Updates
Score ID Description Maximum
Severity
Missing MS08-055 Security Update for the 2007 Microsoft Office System (KB951944) Important
Missing MS08-070 Security Update for Microsoft Office Project 2007 (KB949046) Critical
Missing MS08-069 Security Update for Microsoft Office 2007 (KB951550) Important
Update Rollups and Service Packs
Score ID Description
Missing 923618 Office 2003 Service Pack 3 (SP3)
Missing 953195 The 2007 Microsoft Office Suite Service Pack 2 (SP2)
Missing 923620 Visio 2003 Service Pack 3 (SP3)
Current Update Compliance
Severity
Installed 887618 Office 2003 Service Pack 2 for Proofing Tools
Installed MS08-072 Security Update for the 2007 Microsoft Office System (KB956828) Important
Installed MS07-042 Security Update for the 2007 Microsoft Office System (KB936960) Important
Installed 949426 Microsoft Office Accounting 2008 UK Service Pack 1 (KB949426)
Installed MS09-009 Security Update for 2007 Microsoft Office System (KB960003) Important
Installed 887619 OneNote 2003 Service Pack 2
Installed 949426 Microsoft Office Accounting 2008 US Service Pack 1 (KB949426)
Installed MS08-051 Security Update for Microsoft Office PowerPoint 2007 (KB951338) Important
Installed MS09-009 Security Update for Microsoft Office Excel 2007 (KB959997) Important
Installed MS07-025 Security Update for Office 2007 (KB934062) Important
Installed MS08-015 Security Update for Microsoft Office Outlook 2007 (KB946983) Critical
Installed MS08-072 Security Update for Microsoft Office Word 2007 (KB956358) Important
Installed MS08-052 Security Update for the 2007 Microsoft Office System (KB954326) Critical
Installed 887620 Project 2003 Service Pack 2
SQL Server No security updates are missing.
Security
Updates Current Update Compliance
Severity
Installed MS06-061 MSXML 6.0 RTM Security Update (925673) Critical
Windows No security updates are missing.
Security
Updates Current Update Compliance
Severity
Installed MS09-071 Security Update for Windows Server 2003 (KB974318) Important
Installed MS10-007 Security Update for Windows Server 2003 (KB975713) Critical
Installed MS08-032 Cumulative Security Update for ActiveX Killbits for Windows Server 2003 (KB950760) Low
Installed MS10-029 Security Update for Windows Server 2003 (KB978338) Moderate
Installed MS08-069 Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB954430) Important
Installed MS10-041 Microsoft .NET Framework 3.5 SP1 and .NET Framework 2.0 SP2 Security Update for Windows 2000, Windows Important
Server 2003, and Windows XP x86 (KB979909)
Installed MS09-051 Security Update for Windows Media Format Runtime 9.5 for Windows Server 2003 (KB954155) Critical
Installed MS09-061 Microsoft .NET Framework 1.1 Service Pack 1 Security Update for Windows Server 2003 x86 and Windows Important
Server 2003 R2 x86 (KB953298)
Installed MS10-033 Security Update for Windows Media Format Runtime 9.5 for Windows Server 2003 (KB978695) Critical
Installed MS10-042 Security Update for Windows Server 2003 (KB2229593) Low
Installed MS09-061 Microsoft .NET Framework 2.0 Service Pack 1 Security Update for Windows 2000, Windows Server 2003, and Critical
Windows XP (KB953300)
Installed 914961 Windows Server 2003 Service Pack 2 (32-bit x86)
Installed 890830 Windows Malicious Software Removal Tool - August 2010 (KB890830)
Installed 944036 Internet Explorer 8 for Windows Server 2003
Installed MS10-060 Security Update for .NET Framework 2.0 SP2 and 3.5 SP1 on Windows Server 2003 and Windows XP x86 Critical
(KB983583)
Installed MS10-001 Security Update for Windows Server 2003 (KB972270) Low
Installed MS09-045 Security Update for Jscript 5.8 for Windows Server 2003 (KB971961) Critical
Installed MS08-069 Security Update for Microsoft XML Core Services 6.0 Service Pack 2 (KB954459) Important
Installed 951847 Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 3.5 Family Update (KB951847) x86
Installed MS06-078 Security Update for Windows Media Player 6.4 (KB925398) Critical
Installed 981793 Update for Windows Server 2003 (KB981793)
Installed 951847 Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 3.5 Family Update for .NET versions 2.0
through 3.5 (KB951847) x86
Installed MS07-040 Security Update for Microsoft .NET Framework, Version 1.1 Service Pack 1 (KB933854) Critical
Installed MS10-034 Cumulative Security Update for ActiveX Killbits for Windows Server 2003 (KB980195) Critical
Installed MS10-041 Microsoft .NET Framework 1.1 SP1 Security Update for Windows Server 2003 x86 and Windows Server 2003 Important
R2 x86 (KB979907)
Installed MS10-053 Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 (KB2183461) Critical
Installed MS07-034 Cumulative Security Update for Outlook Express for Windows Server 2003 (KB929123) Low
Windows Scan Results
Administrative Vulnerabilities
Score Issue Result

Automatic The Automatic Updates feature has not been configured on this computer. Please upgrade to the latest Service Pack to obtain the latest version
Updates of this feature and then use the Control Panel to configure Automatic Updates.
Password Some user accounts (2 of 3) have non-expiring passwords.

Expiration User
Administrator
Guest
SUPPORT_388945a0
Incomplete A previous software update installation was not completed. You must restart your computer to finish the installation. If the incomplete installation
Updates was a security update, then the computer may be at risk until the computer is restarted.
Windows Windows Firewall is managed through Group Policy on this computer. Windows Firewall is disabled and has exceptions configured.
Firewall Connection Name Firewall Exceptions
All Connections Off Programs
LAN Off* Programs*
Local Area Connection Off* Programs*
Local Area Connection 2 Off* Programs*
Local Area Connection 5 Off* Programs*
Local Account Some user accounts (1 of 3) have blank or simple passwords, or could not be analyzed.
Password Test User Weak Password Locked Out Disabled
Guest Weak - Disabled
SUPPORT_388945a0 - - Disabled
Administrator - - -
File System All hard drives (2) are using the NTFS file system.
Drive Letter File System
C: NTFS
D: NTFS
Guest Account The Guest account is disabled on this computer.
Autologon Autologon is not configured on this computer.
Restrict Computer is properly restricting anonymous access.

Anonymous
Administrators No more than 2 Administrators were found on this computer.

User
Administrator
Additional System Information
Score Issue Result

Windows Computer is running Microsoft Windows Server 2003.
Version
Auditing Logon Success auditing is enabled, however Logon Failure auditing should also be enabled.
Shares 3 share(s) are present on your computer.

Share Directory Share ACL Directory ACL
ADMIN$C:\WINDOWSAdmin ShareBUILTIN\Users - RX, BUILTIN\Power Users - RWXD, BUILTIN\Administrators - F, NT AUTHORITY\SYSTEM - F
C$ C:\ Admin ShareBUILTIN\Administrators - F, NT AUTHORITY\SYSTEM - F, NT AUTHORITY\Authenticated Users - RWXD,
BUILTIN\Users - RX
D$ D:\ Admin ShareBUILTIN\Administrators - F, NT AUTHORITY\SYSTEM - F, BUILTIN\Users - RX, Everyone - RX
Services Some potentially unnecessary services are installed.

Service State
Telnet Stopped
Internet Information Services (IIS) Scan Results

Score Issue Result
IIS Status IIS is not running on this computer.
SQL Server Scan Results

Score Issue Result
SQL SQL Server and/or MSDE is not installed on this computer.
Server/MSDE
Status
Desktop Application Scan Results
Administrative Vulnerabilities
Score Issue Result

IE Zones Internet Explorer zones do not have secure settings for some users.
User Zone Level Recommended Level
OSIPTEL\administrator Internet Medium High
IE Enhanced The use of Internet Explorer is restricted for administrators on this server.
Security
Configuration
for
Administrators
IE Enhanced The use of Internet Explorer is restricted for non-administrators on this server.
Security
Configuration
for Non-
Administrators
Macro Security No supported Microsoft Office products are installed.

Microsoft Baseline Security Analyzer 2

Hochgeladen von

Dokumentinformationen

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

Microsoft Baseline Security Analyzer 2

Hochgeladen von

Copyright:

Verfügbare Formate

Security assessment:

Severe Risk (One or more critical checks failed.)

Score Issue Result

Windows Scan Results

Score Issue Result

Password Some user accounts (2 of 3) have non-expiring passwords.

Guest Account The Guest account is disabled on this computer.

Autologon Autologon is not configured on this computer.

Restrict Computer is properly restricting anonymous access.

Administrators No more than 2 Administrators were found on this computer.

Additional System Information

Score Issue Result

Shares 3 share(s) are present on your computer.

Services Some potentially unnecessary services are installed.

Internet Information Services (IIS) Scan Results

SQL Server Scan Results

Score Issue Result

Macro Security No supported Microsoft Office products are installed.

Das könnte Ihnen auch gefallen