The IISAdminBase must be registered on the computer running MBSA, as well as on any remote computer being scanned, in order to perform the IIS-specific security checks. The IISAdminBase objects can be registered by installing the IIS Common Files that are included in the Windows operating system. Note that a full installation of IIS is not required, and just the IIS Common Files can be installed on the computer running MBSA to scan remote IIS servers.
Microsoft Baseline Security Analyzer (MBSA) Is Available (Q320454)
⌐ 2002 Microsoft Corporation. All rights reserved.