security in windows

[anishgma]

hi all,

can u all let me knw are there tools available fro MS or any third party for checking the misconfigurations in the system(system Audit)

tia

[JRViejo]

anishgma, first, welcome to Wilders! You can't go wrong with Belarc Advisor - Free Personal PC Audit (http://www.belarc.com/free_download.html).

[MrBrian]

Microsoft Baseline Security Analyzer (http://technet.microsoft.com/en-us/security/cc184924.aspx)

[anishgma]

thanks guys

MBSA is a tool for checking patches if i'm not wrong.

actually i want to use a tool in a corporate environment for auditing systems.
MBSA will be ok to check patch but not the other settings like security settings.and other misconfigurations.

are there some other tools.

[JRViejo]

anishgma, if Belarc Advisor is not capable, see if either WinAudit (http://www.pxserver.com/WinAudit.htm) or System Information for Windows (http://www.gtopala.com) Pro Version is what you are looking for.

[MrBrian]

MBSA does check for some security misconfiguration issues.

You can also try CIS Configuration Benchmark Scoring Tools, which are pretty comprehensive.

-{ Quote: "CIS Benchmarks enumerate security configuration settings and actions that "harden" your systems. They are unique, not because the settings and actions are unknown to any security specialist, but because consensus among hundreds of security professionals worldwide has defined these particular configurations." }-

-{ Quote: "CIS Scoring Tools enable end users to verify the security configuration of systems prior to network deployment, monitor systems and network devices for ongoing conformity with the benchmarks, and demonstrate to auditors and business partners their compliance with the internationally accepted standard for security configuration. The Tools are host based and produce reports that guide users and system administrators to secure both new installations and production systems." }-

[anishgma]

thanks a lot guys. i'll luk into all these tools and let u knw whether my requirements are fulfilled.

thanks again