MBSA Management Pack Guide

  • Article

Microsoft Baseline Security Analyzer (MBSA) scans computers and reports on missing security patches and other security vulnerabilities that are known to Microsoft. MBSA relies on an updated Mssecure.cab file that is downloaded from the Internet. This file includes data that is used to flag missing security patches and other security vulnerabilities.

Using the MBSA Management Pack, you can configure exceptions so you do not receive alerts for specific vulnerabilities and patches or for specific computers or computer groups.

The MBSA Management Pack automatically:

  • Places the required MBSA binaries on all MOM agents.

  • Scans agent computers and reports on missing security patches and other security vulnerabilities.

  • Downloads updated versions of the Mssecure.cab file from the Internet and copies this file to all agent computers.

For more information about MBSA, see the MBSA Website (https://go.microsoft.com/fwlink/?LinkId=32721).

This guide was developed with the September, 2004 version of the MBSA Management Pack. Ensure that you are using the most recent version of the Management Pack by going to https://www.microsoft.com/mom/managementpacks (https://go.microsoft.com/fwlink/?LinkId=33752).