Microsoft Baseline Security Analyzer (MBSA) is a FREE tool from Microsoft.

MBSA consumes a very small amount of system recources.

MBSA is an easy-to-use tool that helps you determine their security state in accordance with Microsoft security recommendations and offers specific remediation guidance - unfortunately it means yet another job for the IT department to do regularly on every single sever ! 

PageR can now do this for you AUTOMATICALLY using the new MBSA Monitored Object to :-

Security update checks

Scan servers for security updates uses Microsoft Update and Windows Server Update Services technologies.

Check for security updates, update rollups, and service packs .

Windows system checks

Check for account password expiration
Check for file system type on hard drives
Check if Auto Logon feature is enabled
Check if Guest account is enabled
Check the RestrictAnonymous registry key settings
Check the number of local Administrator accounts
Check for blank or simple local user account passwords
Check if unnecessary services are running
List the shares present on the computer
Check if Windows auditing is enabled
Check the Windows version running on the scanned computer
Check if Internet Connection Firewall is enabled
Check if Automatic Updates is enabled
Check if incomplete updates require the computer to be restarted

IIS checks

Check if the IIS Lockdown tool was run on the computer
Check if IIS sample applications are installed
Check if IIS parent paths are enabled
Check if the IIS Admin virtual folder is installed
Check if the MSADC and Scripts virtual directories are installed
Check if IIS logging is enabled
Check if IIS is running on a domain controller

SQL Server checks

Check if Administrators group belongs in Sysadmin role
Check if CmdExec role is restricted to Sysadmin only
Check if SQL Server is running on a domain controller
Check if sa account password is exposed
Check SQL Server installation folders access permissions
Check if Guest account has database access
Check if Everyone group has access to SQL Server registry keys
Check if SQL Server accounts have blank or simple passwords
Check the SQL Server authentication mode type
Check the number of Sysadmin role members
Check SQL Server password and expiration policies
Check SQL Server Integration Services

Desktop application checks

List the Internet Explorer security zone settings for each local user
Check if Internet Explorer Enhanced Security Configuration is enabled for Administrators
Check if Internet Explorer Enhanced Security Configuration is enabled for non-Administrators
List the Office products security zone settings for each local user

Incomplete or Partially Installed Updates

For updates installed by using Windows Update, Microsoft Update, or Automatic Updates that required a restart of the computer that was postponed by the user, MBSA will indicate that the update is not installed because the required reboot has not occurred.