Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am responsible for scanning and fixing issues on ~50 servers with Microsoft Baseline Security Analyzer (MBSA) version 2.2. Unfortunately, there is no out of the box way to manage multiple MBSA results. The only semi-official way to do this has been through the scripting examples page, and even this is not very great. It only sort of tallies the results up without giving details.

The best way I have come up with so far is changing the file extension of the MBSA results to XML and importing them into an excel spreadsheet but it is very tedious as it includes every detail, even if there is no issue, additionally this is suspicious to auditors who want "tamper free" results.

Is there a better method / procedure / program / trick to managing these results?

share|improve this question

There is the MBSA Management Pack from MS. It provides reports and performs some of the basic tasks an MBSA admin might need to do.

share|improve this answer
I cannot seem to find a working download link :( – Goatmale Dec 6 '12 at 15:08

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.