Microsoft Baseline Security Analyzer (MBSA) – on remote computer without a trust

In order to run Microsoft Baseline Security Analyzer (MBSA) against a remote computer with alternative credentials – such as computers in a perimeter without a trust – you have to either call MBSA from command line or connect to the remote computer using NET USE. Below are shown both alternatives:

Alternative #1 – command line

MBSACLI.EXE /target <server name> /u <username> /p <password>

 

Alternative #2 – GUI (with net use)

Launch MBSA GUI

Before the scan is started run a Command Prompt as Administrator to specify alternative credentials with NET USE and the remote computer ip-adress.

NOTE: It is important to use Run As Administrator because Microsoft Baseline Security Analyzer (MBSA) is also running as administrator!

net use \\<computer-ip> <remote-password> /user:<remote-user>

When this is done Microsoft Baseline Security Analyzer (MBSA) can start scanning the remote computer from GUI

Published by

Henrik Damgaard

Hi I’m Henrik and I write this blog based on useful topics I find interesting – mostly covering some of my technical interests : System Center Operations Manager (SCOM), BizTalk, Windows Server, PowerShell, SQL server, Internet Information Services, PHP and .NET I am currently holding a position as System Administrator with focus on Microsoft server products.

Leave a Reply

Your email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.