Microsoft Baseline Security Analyzer (MBSA)
Scans single systems or multiple systems across a network for common system misconfigurations and missing security updates.

Free Security Risk Self Assessment for Midsize Organizations
Download the Microsoft Security Risk Self-Assessment Tool (MSRSAT) and install it on your computer to obtain information and recommendations about best practices to help enhance security within your information technology (IT) infrastructure.

Scans single systems or multiple systems across a network for common system misconfigurations and missing security updates.

Lets you view the results of a Microsoft Baseline Security Analyzer scan in a clear, comprehensive Microsoft Office Visio 2003 network diagram.

Simplifies the process of keeping Windows-based systems up to date with the latest critical updates.

Download the Microsoft Security Risk Self-Assessment Tool (MSRSAT) and install it on your computer to obtain information and recommendations about best practices to help enhance security within your information technology (IT) infrastructure.

This tool lets you scan for some updates that are released with Microsoft Security Response Center (MSRC) bulletins where Microsoft System Management Server or another enterprise management solution is not used to manage updates.

Used to identify computers on networks that do not have the 823980 (MS03-026) and the 824146 (MS03-039) security patches installed. (See also: Microsoft Baseline Security Analyzer.)

Allows administrators to script the installation of several patches without requiring multiple reboots.

SMS can help you determine which computers need the security fixes, and then deploy the fixes to the appropriate resources.

Scans your computer and provides a selection of updates tailored for your operating system, software, and hardware.

Scans and updates Microsoft Office products.

Reduces the attack surface of Internet Information Services (IIS) and includes URLScan to provide multiple layers of protection against attackers.

Helps prevent potentially harmful HTTP requests from reaching IIS Web servers.

Available as part of the Security Guide Scripts Download, this is a multi-threaded tool that will parse event logs from many servers at the same time. For information about EventCombMT and Windows security event logs, read "The Windows 2000 Security Guide - Auditing and Intrusion Detection."

This tool, for Windows 2000, permanently overwrites deleted data on hard drives.

Port Reporter tool runs as a service on computers that are running Windows Server 2003, Windows XP, and Windows 2000 and logs TCP and UDP port activity.

PortQry version 1.22 is a TCP/IP connectivity testing utility that is included with the Microsoft Windows Server 2003 Support Tools. Microsoft has released a new version of PortQry (version 2.0). This new version includes all the features and functionality of the earlier version and has new features and functionality.

Help protect your PC from spyware and other potentially unwanted software with this Beta.

The Microsoft Malicious Software Removal Tool is now available for downloading through the Microsoft Download Center, as a critical update through Windows Update, and as an ActiveX control.

You can use the Download.Ject removal tool to detect and attempt to remove certain variants of malicious software delivered by the Download.Ject Trojan horse.

Use this tool to search your hard disk and try to remove Sasser.A, Sasser.B, Sasser.C, Sasser.D, Sasser.E, and Sasser.F.

If you are using Microsoft Windows XP, Windows 2000, or Windows Server 2003, try running the Mydoom, Zindos, and Doomjuice Worm Removal Tool. This tool scans your hard disk for Mydoom and Doomjuice and tries to remove the worm.

Use the Blaster removal tool for Windows 2000 and Windows XP to remove the worm from your system.

Prevents users from accessing several potentially dangerous file types when sent as e-mail attachments and increases default security zone settings within Outlook.

Eliminates damage caused by the Code Red II worm.

Include the SQL Critical Update Kit and a Microsoft Systems Management Server (SMS) deployment tool.