Security Tools

Security Update Management Solutions

Microsoft Update

Microsoft Update consolidates updates provided by Windows Update and Office Update into one location and enables you to choose automatic delivery and installation of high-priority updates.

Windows Server Update Services

Windows Server Update Services (WSUS) simplifies the process of keeping Windows-based systems current with the latest updates, with minimal administrative intervention.

Systems Management Server 2003 Inventory Tool for Microsoft Updates (Beta)

Currently available as a beta release, with final code expected in mid-July, the Inventory Tool for Microsoft Updates allows large enterprises to more easily manage security updates.

Security Update Detection Solutions

Microsoft Baseline Security Analyzer 2.0

MBSA 2.0 scans for missing security updates and common security misconfigurations. It offers an improved user experience, expanding product support and can be used in conjunction with Microsoft Update and Windows Server Update Services.

Microsoft Office Visio 2003 Connector for the Microsoft Baseline Security Analyzer

Available for MBSA 1.2.1 and MBSA 2.0, the connector lets you view the results of a Microsoft Baseline Security Analyzer scan in a clear, comprehensive Microsoft Office Visio 2003 network diagram.

Enterprise Update Scanning Tool

This tool lets you scan for updates that are released with Microsoft Security Response Center bulletins, where Microsoft System Management Server or another enterprise management solution is not used to manage updates.

Security Risk Assessment Solutions

Security Risk Self-Assessment for Midsize Organizations

Download the Microsoft Security Risk Self-Assessment Tool and install it on your computer to obtain information and recommendations about best practices to help enhance security within your information technology infrastructure.

Earlier Versions of Security Update Tools

Software Update Services (SUS)

SUS simplifies the process of keeping Windows-based systems up to date with the latest critical updates.


Allows administrators to script the installation of several patches without requiring multiple reboots.

Microsoft Baseline Security Analyzer V1.2.1

Scans single systems or multiple systems across a network for common system misconfigurations and missing security updates.

Using Systems Management Server (SMS) 2.0 to Deploy Security Tool Kit Fixes

SMS can help you determine which computers need the security fixes, and then deploy the fixes to the appropriate resources.

Automatic Scan and Update Tools for Windows and Office

Microsoft Update

Microsoft Update consolidates updates provided by Windows Update and Office Update into one location and enables you to choose automatic delivery and installation of high-priority updates.

Windows Update

Windows Update scans your computer and provides a selection of updates tailored for your operating system, software, and hardware.

Microsoft Office Update

Scans and updates Microsoft Office products.

Lockdown, Auditing, and Intrusion Detection Tools

IIS Web Server Lockdown Wizard

Reduces the attack surface of Internet Information Services (IIS) and includes URLScan to provide multiple layers of protection against attackers.

UrlScan Security Tool

Helps prevent potentially harmful HTTP requests from reaching IIS Web servers.


Available as part of the Security Guide Scripts Download, this is a multi-threaded tool that will parse event logs from many servers at the same time. For information about EventCombMT and Windows security event logs, read "The Windows 2000 Security Guide – Auditing and Intrusion Detection."

Cipher Security Tool

This tool, for Windows 2000, permanently overwrites deleted data on hard drives.

Port Reporter

The Port Reporter tool runs as a service on computers running Windows Server 2003, Windows XP, or Windows 2000 and logs TCP and UDP port activity.


PortQry is a TCP/IP connectivity testing utility that is included with the Microsoft Windows Server 2003 Support Tools. Version 2.0 includes all the features and functionality of the earlier 1.22 release and has new features and functionality.

Virus Protection and Cleaner Tools

Microsoft Windows AntiSpyware (Beta)

Help protect your PC from spyware and other potentially unwanted software with this beta release.

Malicious Software Removal Tool

The Microsoft Malicious Software Removal Tool is now available for downloading through the Microsoft Download Center, as a critical update through Windows Update, and as an ActiveX control.

Office 2000 Update: Service Pack 3

This update includes the Outlook 2000 SR1 E-mail Security Update, which prevents users from accessing several potentially dangerous file types when sent as e-mail attachments. It also increases default security zone settings within Outlook.

Cleaner for Code Red II Worm

Eliminates damage caused by the Code Red II worm.

Resources for Combating the Slammer Worm

Include the SQL Critical Update Kit and a Microsoft Systems Management Server (SMS) deployment tool.