Skip to main content

Planning a Security Update Infrastructure

You can use Microsoft Baseline Security Analyzer (MBSA) to scan for security-related updates on multiple computers. MBSA Version 1.1.1 includes both a GUI tool and a command-line interface. You can use these tools to perform scans of Windows systems on your network.

MBSA runs on Windows 2000, Windows XP and Windows Server 2003 systems, but you can perform scans of all Windows NT-based clients, including Windows NT Workstation and all later clients.

You can also scan for updates to applications running on the clients including Internet Explorer (IE), and Office applications including Office 2000 and later.

Software Update Services (SUS) lets you automatically download, test, approve and install the latest critical updates and service packs from the Microsoft Windows Update Web site. You should be familiar with the features of SUS, as shown in the table below.

SUS is new to Windows Server 2003 but backward compatible with Windows 2000 servers running Service Pack 3 or later. You can use SUS to update clients running Windows 2000 Professional and Windows XP Professional with the latest service packs, system fixes and security patches.

Next: Software Update Services (SUS)