Welcome to the Microsoft Baseline Security Analyzer

The Microsoft Baseline Security Analyzer checks computers running Microsoft Windows┬« Server 2003, Windows XP, Windows 2000, or Windows NT┬« 4.0 for common security misconfigurations. You must have administrator privileges for each computer you want to scan.

Scans can be performed locally and remotely against computers running Windows Server 2003, Windows XP, Windows 2000, and Windows NT 4.0. Note that on computers running Windows XP and using simple file sharing, only local scans can be performed.

Scan a computer
Scan more than one computer
View existing security reports

This version of Microsoft Baseline Security Analyzer has expired. Please upgrade to the released version.

Go to Microsoft Baseline Security Analyzer Updates

The Microsoft Baseline Security Analyzer requires MSXML. You must install MSXML before starting MBSA.

Go to XML download page