Incomplete Scan (Could Not Complete One or More Requested Checks.)
Incomplete Scan (Could Not Complete One or More Requested Checks.)
Security assessment:
Security Updates
Score Issue Securt iy Updat es Result Cannot scan because t get com put i not assi ar er s gned t a W SUS ser . o ver
Wi ndow s Fiew al r l
Wi ndow s Fiew al i enabl and has exceptons confgur W i r ls ed i i ed. ndow s Fiew al i enabl on al net or r ls ed l w k connectons. i Connection Name Firewall Exceptions Al Connectons l i LocalAr Connecton ea i Team Vi er VPN ew VM w ar Net or Adapt VM net e w k er 1 VM w ar Net or Adapt VM net e w k er 8 On On On On On Por s,Pr am s,Ser ces t ogr vi Por s*,Pr am s*,Ser ces* t ogr vi Por s*,Pr am s*,Ser ces* t ogr vi Por s*,Pr am s*,Ser ces* t ogr vi Por s*,Pr am s*,Ser ces* t ogr vi
Som e user account ( of 5) have bl s 2 ank or si pl passw or or coul not be anal m e ds, d yzed. User Weak Password Locked Out Adm i st at ni r or Guest Hom eGr oupUser $ __vm w ar e_user __ user W eak W eak -
Fie Syst l em
file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011
Page 2 of 9
Guest Account
Aut ogon ol
Updat ar aut atcaly dow nl es e om i l oaded and i aled on t s com put . nst l hi er
Additional System Information Score Issue Wi ndow s Ver on si Audii tng Result Com put i r er s unni M i osof W i ng cr t ndow s 7.
Neiher Logon Success nor Logon Faiur audii ar enabl Enabl audii and t n on audii f t l e tng e ed. e tng ur tng or s ogon and l ogof .Be sur t m onior your event l t w at f unaut i access. f e o t og o ch or horzed specii event such as l fc
Shar es
er 10 shar s) ar pr e( e esent on your com put . Share Directory Share ACL Canon M P490 seres i Canon i er Local O nl spl y M P490 seresPrnt , i Prnt i er ADM I N$ C: W i \ ndow s
Directory ACL
Adm i Shar n e
NT SERVI Tr edI aler- F,NT CE\ ust nst l AUTHO RI SYSTEM - RW XD, TY\ ni r or LTI User s BUI N\ LTI Adm i st at s - RW XD,BUI N\ RX BUI N\ LTI Adm i st at s - F,NT ni r or LTI User - RX,NT s AUTHO RI SYSTEM - F,BUI N\ TY\ AUTHO RI Aut TY\ hentcat User - D i ed s BUI N\ LTI Adm i st at s - F,NT ni r or AUTHO RI SYSTEM - F,NT TY\ i ed s AUTHO RI Aut TY\ hentcat User - RW XD, BUI N\ LTI User - RX s BUI N\ LTI Adm i st at s - F,NT ni r or AUTHO RI SYSTEM - F,NT TY\ AUTHO RI Aut TY\ hentcat User - RW XD, i ed s BUI N\ LTI User - RX s BUI N\ LTI Adm i st at s - F,NT ni r or AUTHO RI SYSTEM - F,NT TY\ AUTHO RI Aut TY\ hentcat User - RW XD, i ed s s BUI N\ LTI User - RX BUI N\ LTI Adm i st at s - F,NT ni r or AUTHO RI SYSTEM - F,NT TY\ i ed s AUTHO RI Aut TY\ hentcat User - RW XD, BUI N\ LTI User - RX s
C$
C: \
Adm i Shar n e
D$
D: \
Adm i Shar n e
F$
F: \
Adm i Shar n e
G$
G: \
Adm i Shar n e
H$
H: \
Adm i Shar n e
Hr s m
D: Hr s \ m
Adm i st at s - F,CO M PUTER\ ni r or user- F,CO M PUTER\ Hom eUser - F, s Ever yone - F BUI N\ LTI Adm i st at s - F,NT ni r or AUTHO RI SYSTEM - F TY\ Adm i st at s - F,NT AUTHO RI SYSTEM - F, ni r or TY\ BUI N\ LTI Adm i st at s - F,BUI N\ Ever yone - F ni r or LTI User - RX, s yone - RX Ever Ever yone - R, NT AUTHO RI SYSTEM - F, TY\
User s
C: User \ s
prnt i $
C: W i \ ndow s\ syst 32 em
file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011
Page 3 of 9
\ spooldrver \ i s
Ser ces vi
Som e pot i l unnecessar ser ces ar i aled. entaly y vi e nst l Service Tel net W ord W i W eb Publshi Ser ce l de i ng vi
i s r ual r ores e esent . The M SADC and Scrpt vit diect i ar not pr
The I S Lockdow n t w as devel I ool oped f I S 4. 5. and 5. and i not needed f new W i or I 0, 0, 1, s or ndow s Ser ver nst l i unni I S 6. ng I 0. 2003 i alatons r
Additional System Information Score Issue I S Loggi I ng Enabl ed Result t e ng he ecom m ended l oggi optons. ng i Al w eb and FTP sies ar usi t r l
SQ L Ser and/ M SDE aut ver or hentcaton m ode i set t SQ L Ser and/ M SDE and W i i i s o ver or ndow s ( i M xed M ode) .
Ser ce vi Account s
SQ L Ser ,SQ L Ser Agent M SDE and/ M SDE Agent ser ce account shoul not be m em ber of t l ver ver , or vi s d s he ocal Adm i st at s gr ni r or oup or r as Local em . un Syst Instance Service Account Issue ( aul) def t ( aul) def t M SSQ LSer ver SQ LSer Agent ver SYSTEM SYSTEM Local em account Syst . Local em account Syst .
Cm dExec r e ol
file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011
Page 4 of 9
yone gr oup does not have m or t e han Read access t t SQ L Ser and/ M SDE r st y keys. o he ver or egi r The Ever
Folder I er er or nt nal r .
User -
SSI Rol S es
The BUI N Adm i does not bel LTI n ong t t SSI r es. o he S ol
Sysdt og sl
sl abl st n he er abases Sysdt ogs90 t e does not exi i t M ast or M SDB dat
The Ever yone gr oup does not have m or t e han Read access t t SQ L Ser and/ M SDE r st y keys. o he ver or egi r
Folder I er er or nt nal r .
User -
Ser ce vi Account s
SQ L Ser ,SQ L Ser Agent M SDE and/ M SDE Agent ser ce account ar not m em ber of t l ver ver , or vi s e s he ocal ni r or oup and do not r as Local em . un Syst Adm i st at s gr
i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (
[ DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.
Sysadm i ns
i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (
Passw or Polcy [ d i i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. DBNETLI [ B] ConnectonO pen (
SSI Rol S es
i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (
Sysdt og sl
i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (
file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011
Page 5 of 9
Result ver or hentcaton m ode i set t SQ L Ser and/ M SDE and W i i i s o ver or ndow s ( i M xed M ode) . SQ L Ser and/ M SDE aut
The Ever yone gr oup does not have m or t e han Read access t t SQ L Ser and/ M SDE r st y keys. o he ver or egi r
Folder I er er or nt nal r .
User -
Ser ce vi Account s
SQ L Ser ,SQ L Ser Agent M SDE and/ M SDE Agent ser ce account ar not m em ber of t l ver ver , or vi s e s he ocal Adm i st at s gr ni r or oup and do not r as Local em . un Syst
[ DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.
i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (
Sysadm i ns
[ DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.
Passw or Polcy [ d i DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.
SSI Rol S es
i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (
Sysdt og sl
i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (
Fol der Per i ons on t SQ L Ser and/ M SDE i alaton f der ar not set pr m ssi he ver or nst l i ol s e opery. l Per i ons Instance m ssi Folder User \ ogr l M cr t \ CREATO R O W NER M SSQ L10. SSQ LSERVERC: Pr am Fies\ i osof SQ L M Ser \ SSQ L10. SSQ LSERVER\ SSQ L\ nn ver M M M Bi \ ogr l M cr t BUI N\ LTI User s M SSQ L10. SSQ LSERVERC: Pr am Fies\ i osof SQ L M Ser \ SSQ L10. SSQ LSERVER\ SSQ L\ nn ver M M M Bi M SSQ L10. SSQ LSERVERC: Pr am Fies\ i osof SQ L M \ ogr l M cr t CO M PUTER\ LSer M SSQ LUser SQ ver $Rout $M er Ser \ SSQ L10. SSQ LSERVER\ SSQ L\ nn ver M M M Bi M SSQ L10. SSQ LSERVERC: Pr am Fies\ i osof SQ L M \ ogr l M cr t \ CREATO R O W NER Ser \ SSQ L10. SSQ LSERVER\ SSQ L\ a ver M M M Dat \ ogr l M cr t CO M PUTER\ LSer M SSQ LUser SQ ver $Rout $M er M SSQ L10. SSQ LSERVERC: Pr am Fies\ i osof SQ L M Ser \ SSQ L10. SSQ LSERVER\ SSQ L\ a ver M M M Dat
SQ L SQ L Ser and/ M SDE aut ver or hentcaton m ode i set t SQ L Ser and/ M SDE and W i i i s o ver or ndow s ( i M xed M ode) . Ser / SDE ver M Securt iy M ode Regi r st y yone gr oup does not have m or t e han Read access t t SQ L Ser and/ M SDE r st y keys. o he ver or egi r The Ever Per i ons m ssi
file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011
Page 6 of 9
Ser ce vi Account s
SQ L Ser ,SQ L Ser Agent M SDE and/ M SDE Agent ser ce account ar not m em ber of t l ver ver , or vi s e s he ocalAdm i st a ni r and do not r as Local em . un Syst
i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (
[ DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.
i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (
[ DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.
i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (
Sysdt og sl
i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (
Fol der Per i ons on t SQ L Ser and/ M SDE i alaton f der ar not set pr m ssi he ver or nst l i ol s e opery. l Per i ons Instance m ssi Folder User \ ogr l M cr t \ CREATO R O W NER M SSQ L10. LEXPRESSC: Pr am Fies\ i osof SQ L SQ Ser \ SSQ L10. LEXPRESS\ SSQ L\ nn ver M SQ M Bi s M SSQ L10. LEXPRESSC: Pr am Fies\ i osof SQ L SQ \ ogr l M cr t BUI N\ LTI User Ser \ SSQ L10. LEXPRESS\ SSQ L\ nn ver M SQ M Bi M SSQ L10. LEXPRESSC: Pr am Fies\ i osof SQ L SQ \ ogr l M cr t CO M PUTER\ LSer M SSQ LUser SQ ver $Rout $SQ LE er Ser \ SSQ L10. LEXPRESS\ SSQ L\ nn ver M SQ M Bi M SSQ L10. LEXPRESSC: Pr am Fies\ i osof SQ L SQ \ ogr l M cr t \ CREATO R O W NER Ser \ SSQ L10. LEXPRESS\ SSQ L\ a ver M SQ M Dat \ ogr l M cr t SQ ver $Rout $SQ LE er M SSQ L10. LEXPRESSC: Pr am Fies\ i osof SQ L SQ CO M PUTER\ LSer M SSQ LUser Ser \ SSQ L10. LEXPRESS\ SSQ L\ a ver M SQ M Dat
SQ L SQ L Ser and/ M SDE aut ver or hentcaton m ode i set t W i i i s o ndow s O nl y. Ser / SDE ver M Securt iy M ode Regi r st y The Ever yone gr oup does not have m or t e han Read access t t SQ L Ser and/ M SDE r st y keys. o he ver or egi r Per i ons m ssi Ser ce vi Account s SQ L Ser ,SQ L Ser Agent M SDE and/ M SDE Agent ser ce account ar not m em ber of t l ver ver , or vi s e s he ocalAdm i st a ni r gr oup and do not r as Local em . un Syst
[ DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.
[ DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.
i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (
file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011
Page 7 of 9
i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (
[ DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.
Sysdt og sl
i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (
ver or hentcaton m ode i set t SQ L Ser and/ M SDE and W i i i s o ver or ndow s ( i M xed M ode) . SQ L Ser and/ M SDE aut
Cm dExec r e ol
The Ever yone gr oup does not have m or t e han Read access t t SQ L Ser and/ M SDE r st y keys. o he ver or egi r
Instance SQ LEXPRESS
Folder I er er or nt nal r .
User -
SSI Rol S es
The BUI N Adm i does not bel LTI n ong t t SSI r es. o he S ol
Sysdt og sl
sl abl st n he er abases Sysdt ogs90 t e does not exi i t M ast or M SDB dat
file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011
Page 8 of 9
. SQ L Ser and/ M SDE aut ver or hentcaton m ode i set t SQ L Ser and/ M SDE and W i i i s o ver or ndow s ( i M xed M ode)
Ser ce vi Account s
SQ L Ser ,SQ L Ser Agent M SDE and/ M SDE Agent ser ce account shoul not be m em ber of t l ver ver , or vi s d s he ocal Adm i st at s gr ni r or oup or r as Local em . un Syst Instance Service Account Issue ( aul) ( bi) def t 32- t ( aul) ( bi) def t 32- t M SSQ LSer ver SQ LSer Agent ver SYSTEM SYSTEM Local em account Syst . Local em account Syst .
Cm dExec r e ol
The Ever yone gr oup does not have m or t e han Read access t t SQ L Ser and/ M SDE r st y keys. o he ver or egi r
Folder I er er or nt nal r .
User -
SSI Rol S es
n ong t t SSI r es. o he S ol The BUI N Adm i does not bel LTI
Sysdt og sl
sl abl st n he er abases Sysdt ogs90 t e does not exi i t M ast or M SDB dat
SQ LEXPRESS SQ LAgent $SQ LEXPRESSNT AUTHO RI NETW O RK TY\ ( bi) 32- t SERVI CE
. SQ L Ser and/ M SDE aut ver or hentcaton m ode i set t SQ L Ser and/ M SDE and W i i i s o ver or ndow s ( i M xed M ode)
file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011
Page 9 of 9
Sysadm i ns
Cm dExec r e ol
The Ever yone gr oup does not have m or t e han Read access t t SQ L Ser and/ M SDE r st y keys. o he ver or egi r
Folder I er er or nt nal r .
User -
SSI Rol S es
n ong t t SSI r es. o he S ol The BUI N Adm i does not bel LTI
Sysdt og sl
sl abl st n he er abases Sysdt ogs90 t e does not exi i t M ast or M SDB dat
M acr Securt o iy
file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011