Microsoft KB Archive/931943

= Microsoft Baseline Security Analyzer (MBSA) support for Windows Vista =

Article ID: 931943

Article Last Modified on 1/31/2007

-

APPLIES TO


 * Microsoft Baseline Security Analyzer 2.0

-



INTRODUCTION
Microsoft Baseline Security Analyzer (MBSA) version 2.0.1 provides limited support for scanning computers that are running Windows Vista.



MORE INFORMATION
MBSA version 2.1 will fully support Windows Vista. The first beta version of MBSA 2.1 will be available in the first quarter of 2007. The full release version of MBSA 2.1 will be available in the third quarter of 2007.

How to use MBSA 2.0.1 to scan computers that are running Windows Vista
The license terms of MBSA 2.0.1 do not expressly list Windows Vista as a supported operating system. However, you may install and use MBSA 2.0.1 according to the MBSA license terms to scan computers that are running a licensed version of Windows Vista.

Microsoft does not support installing MBSA 2.0.1 on computers that run Windows Vista. We recommend that you install MBSA 2.0.1 on a supported operating system. Then, scan Windows Vista-based computers remotely. MBSA 2.0.1 supports the following Windows operating systems:
 * Microsoft Windows Server 2003
 * Microsoft Windows XP
 * Microsoft Windows 2000

Vulnerability assessment (VA) scanning of Windows Vista-based computers is not supported. Disable VA scanning when you scan Windows Vista-based computers. If you do not disable VA scanning, MBSA 2.0.1 may return inaccurate results.

MBSA 2.0.1 does not support full Microsoft Update (MU) and Windows Server Update Service (WSUS) scans in Windows Vista. This restriction is because of an issue with the Windows Update Agent in Windows Vista. To work around this issue, use one of the following methods.

Use the MBSA GUI
When you use the MBSA graphical user interface (GUI) to scan for updates, scan only Windows Vista-based computers that are not configured for WSUS. Or, scan by using only the Scan using Microsoft Update only option.

Use the MBSA command-line tool
When you use the MBSA command-line tool to scan for updates, scan only Windows Vista-based computers that are not configured for WSUS. Or, use the /catalog switch.

