Welcome to the Microsoft Baseline Security Analyzer
The Microsoft Baseline Security Analyzer checks computers running Microsoft Windows® Server 2003, Windows XP, Windows 2000, or Windows NT® 4.0 for common security misconfigurations. You must have administrator privileges for each computer you want to scan.
Scans can be performed locally and remotely against computers running Windows Server 2003, Windows XP, Windows 2000, and Windows NT 4.0. Note that on computers running Windows XP and using simple file sharing, only local scans can be performed.
This version of Microsoft Baseline Security Analyzer has expired. Please upgrade to the released version.
Go to Microsoft Baseline Security Analyzer Updates
The Microsoft Baseline Security Analyzer requires MSXML. You must install MSXML before starting MBSA.
Go to XML download page