| Author |
Message |
Kerrie
Guest
|
 Posted:
Fri Jan 07, 2005 11:23 am Post subject:
MBSA MP |
|
|
Has anyone managed to get the MBSA management pack to work? It looks useful.
I went through the MBSA MP Guide and thought I went through all the steps,
but I don't seem to be getting any alerts.
In my test system I enabled the guest account to give the rules something to
find - both on a member server which happens to be the MOM Management
server, and then also on the domain. No results. Also when I run the MBSA
Scan task, it only shows one system that it knows about - a DC which happens
to be offline at the moment. Of course that might be because the MBSA was
not installed on that system?
Anyone have any experience with this MP? |
|
| Back to top |
|
 |
Colin (615498)
Guest
|
| Posted:
Fri Jan 07, 2005 12:17 pm Post subject:
Re: MBSA MP |
|
|
From memory it scans only once a week or once a day. Check the data
provider for the rule 'Run vulnerability and security patch scan'. The
mssecure.cab file download never worked for me also.
Colin.
"Kerrie" <kerrieL@comcast.net> wrote in message
news:OCf$9jH9EHA.1204@TK2MSFTNGP10.phx.gbl...
Has anyone managed to get the MBSA management pack to work? It looks useful.
I went through the MBSA MP Guide and thought I went through all the steps,
but I don't seem to be getting any alerts.
In my test system I enabled the guest account to give the rules something to
find - both on a member server which happens to be the MOM Management
server, and then also on the domain. No results. Also when I run the MBSA
Scan task, it only shows one system that it knows about - a DC which happens
to be offline at the moment. Of course that might be because the MBSA was
not installed on that system?
Anyone have any experience with this MP? |
|
| Back to top |
|
|
Neil Hobson [MVP]
Guest
|
| Posted:
Fri Jan 07, 2005 3:14 pm Post subject:
Re: MBSA MP |
|
|
Well, it works fine here. I've just scanned our mail server and it has
reported a minor patch missing. I've also just downloaded the cab file from
the MS link to another server and that reported as successful. I'll admit I
haven't tested the disabling of the Guest account though. Not sure I'll do
that on the production server, even for 2 minutes! :)
You should be able to highlight any server in the Ops Console and then run
the 'Run MBSA Scan' task against that server immediately. Check in the
Events area as to whether it was successful.
--
Neil Hobson
Exchange MVP
For Exchange news, links, and tips, check:
http://www.msexchangeblog.com
"Kerrie" <kerrieL@comcast.net> wrote in message
news:OCf$9jH9EHA.1204@TK2MSFTNGP10.phx.gbl...
| Quote: | Has anyone managed to get the MBSA management pack to work? It looks
useful.
I went through the MBSA MP Guide and thought I went through all the steps,
but I don't seem to be getting any alerts.
In my test system I enabled the guest account to give the rules something
to
find - both on a member server which happens to be the MOM Management
server, and then also on the domain. No results. Also when I run the MBSA
Scan task, it only shows one system that it knows about - a DC which
happens
to be offline at the moment. Of course that might be because the MBSA was
not installed on that system?
Anyone have any experience with this MP?
|
|
|
| Back to top |
|
|
Kerrie
Guest
|
| Posted:
Fri Jan 07, 2005 10:28 pm Post subject:
Re: MBSA MP |
|
|
The things they don't tell you how to do ... thanks Neil! I ran the MBSA
scan task against my Management server (where the guest account is enabled)
and it worked like a champ in telling me about it. Of course its giving me
problems with the cab file ... and the file transfer server happens to be
the same Management server.
"Neil Hobson [MVP]" <neil.hobson@nospam.silversands.co.uk> wrote in message
news:eysvOlJ9EHA.2676@TK2MSFTNGP12.phx.gbl...
| Quote: | Well, it works fine here. I've just scanned our mail server and it has
reported a minor patch missing. I've also just downloaded the cab file
from
the MS link to another server and that reported as successful. I'll admit
I
haven't tested the disabling of the Guest account though. Not sure I'll
do
that on the production server, even for 2 minutes! :)
You should be able to highlight any server in the Ops Console and then run
the 'Run MBSA Scan' task against that server immediately. Check in the
Events area as to whether it was successful.
--
Neil Hobson
Exchange MVP
For Exchange news, links, and tips, check:
http://www.msexchangeblog.com
"Kerrie" <kerrieL@comcast.net> wrote in message
news:OCf$9jH9EHA.1204@TK2MSFTNGP10.phx.gbl...
Has anyone managed to get the MBSA management pack to work? It looks
useful.
I went through the MBSA MP Guide and thought I went through all the
steps,
but I don't seem to be getting any alerts.
In my test system I enabled the guest account to give the rules something
to
find - both on a member server which happens to be the MOM Management
server, and then also on the domain. No results. Also when I run the MBSA
Scan task, it only shows one system that it knows about - a DC which
happens
to be offline at the moment. Of course that might be because the MBSA was
not installed on that system?
Anyone have any experience with this MP?
|
|
|
| Back to top |
|
|
Kerrie
Guest
|
| Posted:
Fri Jan 07, 2005 10:28 pm Post subject:
Re: MBSA MP |
|
|
The things they don't tell you how to do ... thanks Neil! I ran the MBSA
scan task against my Management server (where the guest account is enabled)
and it worked like a champ in telling me about it. Of course its giving me
problems with the cab file ... and the file transfer server happens to be
the same Management server.
"Neil Hobson [MVP]" <neil.hobson@nospam.silversands.co.uk> wrote in message
news:eysvOlJ9EHA.2676@TK2MSFTNGP12.phx.gbl...
| Quote: | Well, it works fine here. I've just scanned our mail server and it has
reported a minor patch missing. I've also just downloaded the cab file
from
the MS link to another server and that reported as successful. I'll admit
I
haven't tested the disabling of the Guest account though. Not sure I'll
do
that on the production server, even for 2 minutes! :)
You should be able to highlight any server in the Ops Console and then run
the 'Run MBSA Scan' task against that server immediately. Check in the
Events area as to whether it was successful.
--
Neil Hobson
Exchange MVP
For Exchange news, links, and tips, check:
http://www.msexchangeblog.com
"Kerrie" <kerrieL@comcast.net> wrote in message
news:OCf$9jH9EHA.1204@TK2MSFTNGP10.phx.gbl...
Has anyone managed to get the MBSA management pack to work? It looks
useful.
I went through the MBSA MP Guide and thought I went through all the
steps,
but I don't seem to be getting any alerts.
In my test system I enabled the guest account to give the rules something
to
find - both on a member server which happens to be the MOM Management
server, and then also on the domain. No results. Also when I run the MBSA
Scan task, it only shows one system that it knows about - a DC which
happens
to be offline at the moment. Of course that might be because the MBSA was
not installed on that system?
Anyone have any experience with this MP?
|
|
|
| Back to top |
|
|
Kerrie
Guest
|
| Posted:
Fri Jan 07, 2005 10:34 pm Post subject:
Re: MBSA MP |
|
|
Actually it is set to - which I presume is the default - every night, at
00:30 AM. It looks like things ran at 5 AM, which isn't quite 12:30 in the
morning, but whatever. I had manually downloaded the mssecure.cab file
yesterday (and disabled the rule to get it automatically), but got an error
on the download from the transfer server to the managed servers (sigh).
"Colin (615498)" <@.c> wrote in message
news:e7qFdCI9EHA.3320@TK2MSFTNGP10.phx.gbl...
| Quote: | From memory it scans only once a week or once a day. Check the data
provider for the rule 'Run vulnerability and security patch scan'. The
mssecure.cab file download never worked for me also.
Colin.
"Kerrie" <kerrieL@comcast.net> wrote in message
news:OCf$9jH9EHA.1204@TK2MSFTNGP10.phx.gbl...
Has anyone managed to get the MBSA management pack to work? It looks
useful.
I went through the MBSA MP Guide and thought I went through all the steps,
but I don't seem to be getting any alerts.
In my test system I enabled the guest account to give the rules something
to
find - both on a member server which happens to be the MOM Management
server, and then also on the domain. No results. Also when I run the MBSA
Scan task, it only shows one system that it knows about - a DC which
happens
to be offline at the moment. Of course that might be because the MBSA was
not installed on that system?
Anyone have any experience with this MP?
|
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in