Check your PC network security with Microsoft Baseline Security Analyzer

Many antivirus tools and security suites now include "vulnerability scanners" which check PCs for security issues.

But despite its age, Microsoft Baseline Security Analyzer still does a more thorough job than most, without costing you anything at all.

MBSA’s big problem is that it doesn’t support Windows 10, but if you’re running anything earlier -- XP to Windows 8.1 or Server -- then it’s still very effective.

The program arrives as a tiny download, installs in seconds, and you’re then able to scan local, network or domain PCs, by name or a range of IP addresses. All you need is administrator privileges on any computer you want to check.

The scan process can take a while -- especially for large networks -- but once complete you’re presented with a detailed report for every system.

Issues checked missing security updates, blank/ simple/ non-expiring passwords, firewall settings, Windows update policy, Guest Account status, Administrator account details, security event auditing, unnecessary services, network shares, Registry permissions, Internet Explorer Zone configuration, key SQL Server/ IIS settings (if they’re installed), and more.

Many of these are targeted at network admins and other experts, but experienced home users will also find plenty of relevant details, and helpful links within the report explain more about what was scanned and how any problems can be fixed.

Reports are saved by default, too, so if you’ve some issue with a setting it’s easy to recall previous scans and find out when (or if) it changed.

Okay, it’s true -- Microsoft Baseline Security Analyzer is aging, business-oriented, and desperately needs support for Windows 10 -- but it can still a handy way to check local and network PCs for security holes. Give it a try.