andersonneil
2010-03-04 22:05:01 UTC
Permalink
Good Morning,Raw Message
I am running Windows 7 Home Premium on my Dell Inspiron 530S.
I have downloaded and installed Microsoft Baseline Security Analyser 2.1
I believe it is good to know that all is OK from a security point of view,
and tools such as this are always of great assistance.
When I run this tool, I have found a couple of reported "errors" which I do
not think are correct. I have attached a copy of the Assessment Report to the
foot of this email so you can see my references.
•In the "Windows Scan Results" section, the report shows that the Guest
account is not disabled on this computer. Using Control Panel, User Accounts,
it is shown that the Guest Account is OFF. What else can I do to remove this
error from the report???
• In the same section, the report shows there is incomplete updates. This is
not correct - I have done multiple restarts and run the Security Analyser
again, and it still shows this error. What can I do to correct this???
•In the same section, the report shows that Windows Firewall is disabled and
has exceptions configured. It is true that windows Firewall is off, as I have
the McAfee Security Centre running and fully configured for all protection.
Couldn't the report show that another Firewall is enabled??? Also, what do
the "exceptions configured" exactly mean???
•In the same section, the report shows that Autologon is not configured on
this computer. Whenever I start Windows, automatically my local account
(Anderson) is logged on without any intervention on my part. I have this
purposely set like this, as I am the only one who really uses this PC for any
major processing. Shouldn't this Autologon check report this??
If some answers could be given to the above, I would be most appreciative.
Regards,
Neil Anderson.
Security assessment:
Severe Risk (One or more critical checks failed.)
Computer name:
@HOME\ANDERSON-PC
IP address:
122.106.187.52
Security report name:
@HOME - ANDERSON-PC (12-01-2010 11-08 AM)
Scan date:
12/01/2010 11:08 AM
Catalog synchronization date:
Security update catalog:
Microsoft Update
Security Updates
Score
Issue
Result
Developer Tools, Runtimes, and Redistributables Security Updates
No security updates are missing.
Current Update Compliance
Score
ID
Description
Maximum Severity
Installed
MS09-035
Security Update for Microsoft Visual C++ 2005 Service Pack 1
Redistributable Package (KB973923)
Moderate
Office Security Updates
No security updates are missing.
Current Update Compliance
Score
ID
Description
Maximum Severity
Installed
949426
Microsoft Office Accounting 2008 UK Service Pack 1 (KB949426)
Installed
MS09-060
Security Update for the 2007 Microsoft Office System (KB974234)
Important
Installed
949426
Microsoft Office Accounting 2008 US Service Pack 1 (KB949426)
Installed
MS09-024
Security Update for the 2007 Microsoft Office System (KB969559)
Important
Installed
MS09-067
Security Update for Microsoft Office Excel 2007 (KB973593)
Important
Installed
953195
The 2007 Microsoft Office Suite Service Pack 2 (SP2)
Installed
MS09-062
Security Update for the 2007 Microsoft Office System (KB972581)
Important
Installed
MS09-017
Security Update for Microsoft PowerPoint 2007 (KB957789)
Important
Installed
MS09-060
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Critical
Installed
MS09-027
Security Update for the 2007 Microsoft Office System (KB969613)
Important
Installed
MS09-067
Security Update for the 2007 Microsoft Office System (KB973704)
Important
SDK Components Security Updates
No security updates are missing.
Current Update Compliance
Score
ID
Description
Maximum Severity
Installed
MS07-028
Security Update for CAPICOM (KB931906)
Critical
SQL Server Security Updates
No security updates are missing.
Current Update Compliance
Score
ID
Description
Maximum Severity
Installed
MS06-061
MSXML 6.0 RTM Security Update (925673)
Critical
Silverlight Security Updates
No security updates are missing.
Current Update Compliance
Score
ID
Description
Maximum Severity
Installed
974331
Update for Microsoft Silverlight (KB974331)
Installed
974331
Update for Microsoft Silverlight (KB974331)
Windows Security Updates
No security updates are missing.
Current Update Compliance
Score
ID
Description
Maximum Severity
Installed
MS08-069
Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB954430)
Important
Installed
890830
Windows Malicious Software Removal Tool - December 2009 (KB890830)
Installed
MS09-061
Microsoft .NET Framework 1.1 Service Pack 1 Security Update for Windows
2000, Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows
Server 2008 R2 (KB953297)
Critical
Installed
976098
Update for Windows 7 (KB976098)
Installed
MS09-055
Security Update for ActiveX Killbits for Windows 7 (KB973525)
Important
Installed
974431
Update for Windows 7 (KB974431)
Installed
MS09-072
Cumulative Security Update for Internet Explorer 8 for Windows 7 (KB976325)
Critical
Installed
MS09-056
Security Update for Windows 7 (KB974571)
Important
Installed
MS09-059
Security Update for Windows 7 (KB975467)
Important
Windows Scan Results
Administrative Vulnerabilities
Score
Issue
Result
Local Account Password Test
Some user accounts (3 of 4) have blank or simple passwords, or could not be
analyzed.
User
Weak Password
Locked Out
Disabled
Administrator
Weak
-
Disabled
Anderson
Weak
-
-
Guest
Weak
-
-
ASPNET
-
-
-
Guest Account
The Guest account is not disabled on this computer.
Password Expiration
Some user accounts (3 of 4) have non-expiring passwords.
User
Administrator
Anderson
Guest
ASPNET
Incomplete Updates
A previous software update installation was not completed. You must restart
your computer to finish the installation. If the incomplete installation was
a security update, then the computer may be at risk until the computer is
restarted.
Windows Firewall
Windows Firewall is disabled and has exceptions configured.
Connection Name
Firewall
Exceptions
All Connections
Off
Programs, Services
Local Area Connection
Off*
Programs*, Services*
File System
All hard drives (2) are using the NTFS file system.
Drive Letter
File System
C:
NTFS
D:
NTFS
Autologon
Autologon is not configured on this computer.
Restrict Anonymous
Computer is properly restricting anonymous access.
Administrators
No more than 2 Administrators were found on this computer.
User
Administrator
Anderson
Automatic Updates
Updates are automatically downloaded and installed on this computer.
--------------------------------------------------------------------------------
--
Regards,
Neil
Regards,
Neil