• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 370
  • Last Modified:

MBSA want to scan servers for security patches

I have MBSA 2.0 want to know if i can scan missing patches remotely or do i need some agent to be installed ?
1 Solution
vijyantAuthor Commented:
when i use to scan its says catalog missing
Yes, it does need an agent on the remote machine; it's already included in W2k3 SP1 and XP SP2, and the MBSA will try to deploy it (remotely as well) if not present.
If the machine you're running MBSA on doesn't have an internet connection, you need to download the necessary files and store them locally.

Check here for details:
MBSA 2.0 Frequently Asked Questions

Q. What happens if I do not have Windows Update Agent deployed when I scan?      
A. MBSA 2.0 will automatically attempt to install Windows Update Agent. If this feature has been switched off, the required agent may not be present on the scanned computer. If this is the case, the report includes an error message for the scanned computer. You may see the following errors to indicate this:
* "Computer has an older version of the client and security database demands a newer version"
* "Windows update Agent not found or the computer is not running Windows 2000 SP3 or later"

Q. MBSA uses files that it downloads from the Internet, but the computer I want to use to scan my network doesn't have Internet access. How can I use MBSA in this case?
A. Perform the scan using the mbsacli command-line utility with the /nd (do not download) parameter after copying the necessary files to the computer performing the scan. There are three types of files that are required:
* Security update catalog (Wsusscan.cab), available from the Microsoft Web site
* Authorization catalog for Windows Update site access (Muauth.cab), available from the Microsoft Web site
* Windows Update Agent (if not already installed):
* For x86-based computers (WindowsUpdateAgent20-x86.exe), available from the Microsoft Web site
* For x64-based computers (WindowsUpdateAgent20-x64.exe), available from the Microsoft Web site
After downloading the files from the Microsoft Web site, copy them to the following folder on the computer performing the security update scan:
C:\Documents and Settings\username\Local Settings\Application Data\Microsoft\MBSA\2.0\Cache
Important: To ensure that MBSA has access to the most current versions of these files, you should download them on a weekly basis or after any release of security bulletins from Microsoft. This is especially important in the case of the security update catalog (wsusscan.cab) because Microsoft releases an updated version of this file whenever new security bulletins are released or updated.
When you run MBSA to perform security update checks on remote computers, MBSA deploys the Windows Update Agent to the remote computer.

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now