General discussion

  • Creator
    Topic
  • #2285051

    Upgraded 2k to XP, now MSBA can’t scan

    Locked

    by graytalon ·

    Greetings,
    We did some upgrades from Windows 2000 to Windows XP recently, but when we went to run MSBA (Microsoft Security Baseline Analyzer), we ran into a glitch. It seems that the registery can’t be scanned by MSBA. It said to make sure remote registery service was running and it was.

    Also, IIS common files were installed and I can not use MMC to access the user information. I normally do fresh installs on OS’s just from the stability stand point, but these were special cases.

    Any assistance would be greatly appreciated.

All Comments

  • Author
    Replies
    • #3311675

      Reply To: Upgraded 2k to XP, now MSBA can’t scan

      by bfilmfan ·

      In reply to Upgraded 2k to XP, now MSBA can’t scan

      Are you using the latest version that was released in April for XP, which should be version 1.21?

      Just as an additional thought the Server, File & Print Sharing and remote Registry services must all be running for MSBA to function. Also TCP ports 139 and 445 must be open, as well as, UDP ports 137 and 138.

      http://www.microsoft.com/technet/security/tools/mbsahome.mspx

      Hope this resolves the issue for you.

    • #3311663

      Reply To: Upgraded 2k to XP, now MSBA can’t scan

      by graytalon ·

      In reply to Upgraded 2k to XP, now MSBA can’t scan

      MSBA is version 1.2.1. We can use it on fresh installs that are on the same subnet, so I am sure that the ports are not the issue. Remote Registry, Server, and File & Print Sharing are running. I will take a gander at the site. Thanks.

    • #3292337

      Reply To: Upgraded 2k to XP, now MSBA can’t scan

      by haileyan ·

      In reply to Upgraded 2k to XP, now MSBA can’t scan

      If XP service pack 2 was installed the firewall will automatically block all incomming ports. See if turning the firewall off for a sec allows you to connect.

      You can use group policy to control what ports you wnt open on your PCs. Group policy can be setup with different settings for both inside and outside the office.

      • #3314751

        Reply To: Upgraded 2k to XP, now MSBA can’t scan

        by graytalon ·

        In reply to Reply To: Upgraded 2k to XP, now MSBA can’t scan

        We don’t have SP2 installed as of yet. As I stated, this is only on upgrades from Windows 2000 to Windows XP. A fresh XP installs are fine. Also verified that the firewall wasn’t installed on all of the upgrade systems.

        Closing question as I will be hitting CS with the question. Thanks for all the input.

    • #3314750

      Reply To: Upgraded 2k to XP, now MSBA can’t scan

      by graytalon ·

      In reply to Upgraded 2k to XP, now MSBA can’t scan

      This question was closed by the author

Viewing 3 reply threads