Hi,

MBSA, is really a good tool to start finding the security issues with Windows servers. This is what ms says about

"The Microsoft® Baseline Security Analyzer (MBSA) is a tool that allows users to scan one or more Windows®-based computers for common security misconfigurations. MBSA will scan a Windows-based computer and check the operating system and other installed components, such as Internet Information Services (IIS) and SQL Server™, for security misconfigurations and whether or not they are up-to-date with respect to recommended security updates."

MBSA is available for download at:

http://download.microsoft.com/download/8/e/e/8ee73487-4d36-4f7f-92f2-2bdc5c5385b3/mbsasetup.msi ://http://download.microsoft.com/downl.../mbsasetup.msi

For more information about MBSA visit:

http://www.microsoft.com/technet/treeview/...ools/mbsawp.asp