Computer name: WORKGROUP\GREEN2KPRO8

IP address: 129.7.236.91

Security report name: WORKGROUP - GREEN2KPRO8 (2-4-2006 3-53 PM)

Scan date: 2/4/2006 3:53 PM

Scanned with MBSA version: 2.0.5029.2

Security update catalog: Microsoft Update

Catalog synchronization date:

Security assessment: Severe Risk

  Security Updates Scan Results

               Issue:  Windows Security Updates

               Score:  Check passed

               Result: No security updates are missing.

                        Current Update Compliance

           

                                    | MS02-009 | Installed | Security Update, February 14, 2002 (Internet Explorer 5.5) |  |

                                    | MS02-009 | Installed | Security Update, February 14, 2002 (Internet Explorer 6) |  |

                                    | MS03-008 | Installed | 814078: Security Update (Microsoft Jscript version 5.5, Windows 2000) |  |

                                    | MS03-008 | Installed | 814078: Security Update (Microsoft Jscript version 5.6, Windows 2000, Windows XP) |  |

                                    | MS02-050 | Installed | Q329115: Security Update (Windows 2000) |  |

                                    | MS03-011 | Installed | 816093: Security Update Microsoft Virtual Machine (Microsoft VM) | Critical |

                                    | MS04-016 | Installed | Security Update for DirectX 9.0 (KB839643) | Moderate |

                                    | MS04-016 | Installed | Security Update for DirectX 8.0 (KB839643) | Moderate |

                                    | MS04-016 | Installed | Security Update for DirectX 8.1 (KB839643) | Moderate |

                                    | MS04-028 | Installed | Security Update for Internet Explorer 6 Service Pack 1 (KB833989) | Moderate |

                                    | MS04-018 | Installed | Cumulative Security Update for Outlook Express 5.5 SP2 (KB823353) | Moderate |

                                    | MS04-018 | Installed | Cumulative Security Update for Outlook Express 6 SP1 (KB823353) | Moderate |

                                    | MS04-036 | Installed | Security Update for Windows 2000 (KB883935) | Critical |

                                    | MS04-003 | Installed | Security Update for Microsoft Data Access Components (KB832483) | Important |

                                    | MS05-036 | Installed | Security Update for Windows 2000 (KB901214) | Critical |

                                    | MS05-030 | Installed | Security Update for Outlook Express 5.5 Service Pack 2 (KB897715) | Important |

                                    | MS05-040 | Installed | Security Update for Windows 2000 (KB893756) | Important |

                                    | MS05-041 | Installed | Security Update for Windows 2000 (KB899591) | Moderate |

                                    | MS05-042 | Installed | Security Update for Windows 2000 (KB899587) | Moderate |

                                    | MS05-043 | Installed | Security Update for Windows 2000 (KB896423) | Critical |

                                    | MS04-016 | Installed | Security Update for DirectX 8.2 (KB839643) | Moderate |

                                    | 891861 | Installed | Update Rollup 1 for Windows 2000 Service Pack 4 (KB891861) |  |

                                    | MS05-045 | Installed | Security Update for Windows 2000 (KB905414) | Moderate |

                                    | MS05-046 | Installed | Security Update for Windows 2000 (KB899589) | Important |

                                    | MS05-048 | Installed | Security Update for Windows 2000 (KB901017) | Important |

                                    | MS05-050 | Installed | Security Update for DirectX 8 for Windows 2000 (KB904706) | Critical |

                                    | MS05-050 | Installed | Security Update for DirectX 9 for Windows 2000 (KB904706) | Critical |

                                    | MS05-027 | Installed | Security Update for Windows 2000 (KB896422) | Important |

                                    | MS05-032 | Installed | Security Update for Windows 2000 (KB890046) | Important |

                                    | MS05-026 | Installed | Security Update for Windows 2000 (KB896358) | Important |

                                    | MS05-049 | Installed | Security Update for Windows 2000 (KB900725) | Important |

                                    | MS05-047 | Installed | Security Update for Windows 2000 (KB905749) | Important |

                                    | MS05-044 | Installed | Security Update for Internet Explorer 6 Service Pack 1 for Windows 2000 (KB905495) | Moderate |

                                    | MS05-051 | Installed | Security Update for Windows 2000 (KB902400) | Critical |

                                    | MS05-053 | Installed | Security Update for Windows 2000 (KB896424) | Critical |

                                    | MS05-030 | Installed | Security Update for Outlook Express 6 Service Pack 1 (KB897715) | Important |

                                    | MS05-055 | Installed | Security Update for Windows 2000 (KB908523) | Important |

                                    | MS05-050 | Installed | Security Update for Windows 2000 (KB904706) | Critical |

                                    | MS05-054 | Installed | Cumulative Security Update for Internet Explorer 6 Service Pack 1 (KB905915) | Critical |

                                    | MS06-001 | Installed | Security Update for Windows 2000 (KB912919) | Critical |

                                    | 890830 | Installed | Windows Malicious Software Removal Tool - January 2006 (KB890830) |  |

                                    | MS06-002 | Installed | Security Update for Windows 2000 (KB908519) | Critical |

  Operating System Scan Results

    Administrative Vulnerabilities

               Issue:  Local Account Password Test

               Score:  Check failed (critical)

               Result: Some user accounts (2 of 2) have blank or simple passwords, or could not be analyzed.

                          Detail:

                                    | User | Weak Password | Locked Out | Disabled |

                                    | Guest | Weak | - | Disabled |

                                    | Administrator | Weak | - | - |

               Issue:  File System

               Score:  Check passed

               Result: All hard drives (1) are using the NTFS file system.

                          Detail:

                                    | Drive Letter | File System |

                                    | C: | NTFS |

               Issue:  Password Expiration

               Score:  Check failed (non-critical)

               Result: All user accounts (2) have non-expiring passwords.

                          Detail:

                                    | User |

                                    | Administrator |

                                    | Guest |

               Issue:  Guest Account

               Score:  Check passed

               Result: The Guest account is disabled on this computer.

               Issue:  Autologon

               Score:  Check failed (critical)

               Result: Autologon is configured on this computer.

               Issue:  Restrict Anonymous

               Score:  Check failed (critical)

               Result: Computer is running with RestrictAnonymous = 0.  This level allows basic enumeration of user accounts, account policies, and system information. Set RestrictAnonymous = 2 to ensure maximum security.

               Issue:  Administrators

               Score:  Check passed

               Result: No more than 2 Administrators were found on this computer.

                          Detail:

                                    | User |

                                    | Administrator |

               Issue:  Windows Firewall

               Score:  Best practice

               Result: Windows Firewall is not installed or configured properly, or is not available on this version of Windows.

               Issue:  Automatic Updates

               Score:  Check failed (non-critical)

               Result: The Automatic Updates feature has not been configured on this computer. Please use the Control Panel to configure Automatic Updates.

               Issue:  Incomplete Updates

               Score:  Best practice

               Result: No incomplete software update installations were found.

            Additional System Information

               Issue:  Windows Version

               Score:  Best practice

               Result: Computer is running Windows 2000 or greater

               Issue:  Auditing

               Score:  Best practice

               Result: Enable auditing for specific events like logon/logoff. Be sure to monitor your event log to watch for unauthorized access.

               Issue:  Shares

               Score:  Best practice

               Result: 2 share(s) are present on your computer.

                          Detail:

                                    | Share | Directory | Share ACL | Directory ACL |

                                    | ADMIN$ | C:\WINNT | Admin Share | BUILTIN\Users -  RX, BUILTIN\Power Users -  RWXD, BUILTIN\Administrators -  F, NT AUTHORITY\SYSTEM -  F, Everyone -  RX |

                                    | C$ | C:\ | Admin Share | Everyone -  F |

               Issue:  Services

               Score:  Best practice

               Result: Some potentially unnecessary services are installed.

                          Detail:

                                    | Service | State |

                                    | Telnet | Stopped |

 

  Internet Information Services (IIS) Scan Results

            IIS is not running on this computer.

  SQL Server Scan Results

            SQL Server and/or MSDE is not installed on this computer.

  Desktop Application Scan Results

            Administrative Vulnerabilities

               Issue:  IE Zones

               Score:  Check failed (critical)

               Result: Internet Explorer zones do not have secure settings for some users.

                          Detail:

                                    | User | Zone | Level | Recommended Level |

                                    | GREEN2KPRO8\Administrator | Restricted sites | Custom | High |

                                    Sub-Detail:

                                                | Setting | Current | Recommended |

                                                | Script ActiveX controls marked safe for scripting | Enable | Disable |

               Issue:  Macro Security

               Score:  Check not performed

               Result: No Microsoft Office products are installed