The Microsoft Baseline Security Analyzer (MBSA) has been around since the introduction of Windows 2000, yet it remains a free, capable and underutilized tool in many Windows environments. MBSA has always been useful at scanning Windows environments for the presence or absence of security updates, and the latest version -- published in October 2007 and most recently updated in May 2008 -- adds support for Windows Vista and Windows Server 2008. MBSA 2.1, the most current version, is available from Microsoft (see the resources below for pointers and links).

The latest version of MBSA also features an updated, more user-friendly interface than previous versions. It uses more everyday language in its listing, and the analyzer is now better organized and easier to follow. The format blends in with the overall look and feel of Windows Security Center utilities in Vista or Server 2008, as the following screenshot shows: