Over 1 million tech questions and answers.

MBSA for Windows Server 2016

Q: MBSA for Windows Server 2016

Hi,
My objective is to run the tool and analyze the security and software patches on server or computer and produce a list of recommended install.
I read that MBSA (https://docs.microsoft.com/en-us/windows/security/threat-protection/mbsa-removal-and-guidance) only supports up to Windows Server 2012R2.
Is there any tools that support Windows Server 2016 ?
I used WUA and it can't run on some of the computer.
https://docs.microsoft.com/en-us/previous-versions/windows/desktop/aa387290(v=vs.85)
Then, explore Microsoft Security Compliance Toolkit 1.0 but lack of instruction. Not sure it can do the job or not.

https://www.microsoft.com/en-us/download/details.aspx?id=55319
Do you have any recommendation on how I can get started ? Thanks.

Read other answers
RELEVANCY SCORE 200
Preferred Solution: MBSA for Windows Server 2016

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 91.6

Hi,
I have a server with Windows Server 2016 Standard forTerminal Services access, and the user can't run the MBSA, appears always pop up for introduce Admin Credentials.... exist anyway to change this and user run the MBSA?
Regards,

Read other answers
RELEVANCY SCORE 88.4

Hi,
I am aware that the latest MBSA version available is 2.3 which is not supported for Windows 10 and Windows server 2016. What is the best alternative for MBSA which can be used on Windows 10 and Windows server 2016 to identify the missing security patches.
-Coryos

Read other answers
RELEVANCY SCORE 86.4

Can someone answer if MBSA supports Server 2016? If it is not supported what product can be used?

Read other answers
RELEVANCY SCORE 73.2

Does Microsoft Baseline Security Analyzer (MBSA) 2.3 support Windows Server 2016 OS? if not do we have alternative?

Read other answers
RELEVANCY SCORE 68.4

Hi;
I am having the KMS Server with Server 2012 KMS Key,which is hosted on Windows server 2012 R2.

We need to update the KMS Server 2K12 Key to 2K16 KMS Key, Is there any way to Get the detail that the key will activate these OS Versions?

MBAM Report Feature Error Alert

Read other answers
RELEVANCY SCORE 66.4

Wanted to reconfirm is it v2.3 or do we have next version available?

Read other answers
RELEVANCY SCORE 65.6

Hello,
just downloaded the latest wsusscn2.cab (167909 kb) for MBSA offline scanning ... but it does not detect any of the new June 2016 hotfixes. Same result when MBSA is downloading it itself.
Any ideas somebody?

Read other answers
RELEVANCY SCORE 65.6

Hey MS

I have tried to download The cab file is dated 13-june-2106 which seems to be incorrect .


can we have this corrected at the earliest and alert us about this .

Thanks
Sashank

Read other answers
RELEVANCY SCORE 65.2

Hi everybody,
i ran MBSA on a windows 2012 R2 host server and found that 1 Security Updates is missing (MS15-048, KB3032663).

i checked SCCM to see if this KB is in a deployment but i didn't find it in SCCM Database..
Can you help me to understand why this difference ?
i got this on other machine for different updates.
Thx a lot

Read other answers
RELEVANCY SCORE 64.8

Despite the other issues with the .cab files being digitally signed (and not) -- I've discovered that it also doesn't recognize KB3197867 as missing/needed.  

I use another patch management service that indicates that the patch is needed, however the MBSA doesn't show this file as missing -- and therefore it doesn't install.  

This patch is not already installed on my system, and if I download an install it manually it's fine -- but the issue is that the MBSA isn't showing it as missing.

Is this a known issue? Or does anyone else have this issue?

This occurring on both Windows 7 and Windows Server 2008 R2.  

Read other answers
RELEVANCY SCORE 64.4

MBSA report not listing the 2016 October patches . below Kb's got applied to server . add or remove shows as installed but not listed in mbsa .Please help













MS16-120

 



 

KB3188726



 

KB3189039



 

KB3189040



 

KB3188730



 

KB3188731



 

KB3188732










MS16-118

 



 





 

KB3192391



 

KB3192393



 

KB3192392

Read other answers
RELEVANCY SCORE 64.4

MBSA report not listing the 2016 October patches . below Kb's got applied to server . add or remove shows as installed but not listed in mbsa .Please help













MS16-120

 



 

KB3188726



 

KB3189039



 

KB3189040



 

KB3188730



 

KB3188731



 

KB3188732










MS16-118

 



 





 

KB3192391



 

KB3192393



 

KB3192392

Read other answers
RELEVANCY SCORE 59.2

Red Shield - IE Enhanced Security Configuration for Administrators
Amber Shield - IE Enhanced Security Configuration for Non-Administrators
Green Shield - IE Zones
When I click on the how to correct this it takes me to a Windows 2003 page not 2012 for the first issue

And page does not exist for the second issue ?
Any ideas ?

Read other answers
RELEVANCY SCORE 58.4

I bought a pc without os installed, then bought an oem server license, where do I get the activation key from?

Read other answers
RELEVANCY SCORE 58.4

Hi,

I have one machine running Windows XP and I am unable to make a connection via RDP to Windows Server 2016.
I have managed to make successful connection to Windows 2012 and even Windows 10 with latest build.

I have edited these registry keys
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa 
-adding tspkg
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders 
-adding credssp.dll
Also updated RDP client on winXP to 7.0 enviroment

I have tried 2 different machines with 2016 system.
The connection is not refused by any error (EventViewer is empty on both machines). RDP ask for credentials and then show message "Cant connect to the remote computer try it later" 
Do you have any ideas how to solve it ? 

Thanks for any help

Read other answers
RELEVANCY SCORE 57.6

Dear IT Pros,
I have 2 questions that need your help and professional advice.
1) Does Microsoft has a tool to check whether a patch (KB) was superseded by another KB? In my case, I'm trying to search whether this KB4022715 and KB4025339 (both of this KB was released in 2017) was superceded
by another KB. This is because a security consultant has advised us to install both of this KB to prevent vulnerabilities but since it was released back in 2017, I suspect there must be a newer KB that supercedes it
2) Can advice what KB I need to download regarding this 2 bulletin ID CVE-2017-5715 and CVE-2019-11135? Can't seem to find it after much googling

Thanks in advance for the help

Read other answers
RELEVANCY SCORE 57.6

I was wondering if there are any known issues or any compability problems if I want to run windows 2016 Server on a Lenovo ThinkPad T480 20L5. It's meant to act as a probe to monitor traffic in a server room but needs to be small and mobile. Hence my question. Thanx =) Magnus

Read other answers
RELEVANCY SCORE 57.6

I needed to install .NET 3.5 on Server 2016 but have hit all of the roadblocks and need help. Here is what I have tried so far...

I tried to add the feature via the server manager but it ended with code 0x80070002. I did have to provide a path to the sources\sxs folder for the cab file which I expected but that didn't help.I tried using the DISM powershell command to add the feature, both using the source location and also using /All so that it downloads the files from Windows Update. The end result was the same as #1 attempt - 0x80070002.I made sure all updates for the OS have been applied and that updates for 'other Microsoft products' was checked. this made no change in the error.I checked the installed packages via powershell and it shows 3.5 as removed, which again is expected for Server 2016 as they intentionally left it out but provided the cab file in the install media.I have executed a clean sfc /scannow with no errorsI have run a clean dism package commandI have tried installing under a fresh admin user profileI have researched for around 3 hours on the forums so I look forward to the various input
I have uploaded both the DISM and CBS logs. I started fresh with both logs so they contain only details related to a single attempt t install via the server manager.
https://my.pcloud.com/publink/show?code=kZQe4C7ZwcQKz9V82K06TsgYsl0DqkNg3wh7
Thanks for the help!

Read other answers
RELEVANCY SCORE 56.8

Not able to Install OS on HP Proliant DL20 Gen 9 Server, HDD not detected in Logical Drive..

Read other answers
RELEVANCY SCORE 56.8

I am currently having an issue were Windows 7 computers can not connect to Server 2016 (domain). Right away I get a "The logon attempt failed".
I know that user information is correct, because I can connect using any Windows 10 computer. I have tried this from multiple Windows 7 computers, they all give the same error. I don't have any problems at all with Windows 10.

So, this seems to be isolated to Windows 7.
Has anyone seen this or know how to get around this issue?

I appreciate your help!
 

Read other answers
RELEVANCY SCORE 56.8

Buen dia, estamso configurando nuestro sistemas en web nos están pidiendo reinstalar IE11 en WS2016, el problema es que no encontramos donde puede estar esta opción y en internet no hay información al respecto........

Read other answers
RELEVANCY SCORE 56.8

Hi there,
I am currently testing the working of Microsoft Advanced Threat Analytics. I have two virtual machines running windows server 2016 TP4. One VM for ATA Center, Second for Gateway. All the prerequisite steps are configured and port mirroring is working fine.
When i try to install Center setup the message come that " The specified Program requires newer version of windows"

I want to know that does Microsoft ATA supports windows server 2016?
Regards,
Pratik

Read other answers
RELEVANCY SCORE 56.8

I have been trying for hours and cannot figure out how to setup, and configure the FTP properly. Anyone help?
 

Read other answers
RELEVANCY SCORE 56.8

Hi, we are becoming more and more frustrated with the forced windows updates. These may help home users but professional products like servers are not for everyday users and sometimes require alot of configuration to get legacy applications to work.
Windows will at times force updates no matter what we choose in respect to disable them. It is NOT up to Microsoft to determine if or when the servers I am responsible for need to be patched. Any reading and research we have done here has only yielded the
ability to prolong the updates. Once installed over 50% of the servers give an endless spinning circle and require restore or rebuild, this has become unacceptable and has forced us to start testing our applications with different Linux flavors.

Is there a way to STOP the updates indefinitely?

Read other answers
RELEVANCY SCORE 56.8

I am getting this error on one DC, not alot out there that I can find on this error.


Faulting application name: mmc.exe, version: 10.0.14393.953, time stamp: 0x58ba5cff
Faulting module name: GPOAdmin.dll, version: 10.0.14393.1066, time stamp: 0x58d9f2af
Exception code: 0xc0000005
Fault offset: 0x00000000000be1c6
Faulting process id: 0x1120
Faulting application start time: 0x01d2b9ddb96a8ddb
Faulting application path: C:\Windows\system32\mmc.exe
Faulting module path: C:\Windows\System32\GPOAdmin.dll
Report Id: 72683f7e-ea63-4447-8373-4e7c2c33e883
Faulting package full name: 
Faulting package-relative application ID: 

Read other answers
RELEVANCY SCORE 56.8

Source One: System Center 2016 to launch in September

"We are pleased to announce that Microsoft System Center 2016 will be launched at the Microsoft Ignite conference in late September."​
Source Two: Windows Server 2016 new Current Branch for Business servicing option

"Windows Server 2016 is the cloud-ready operating system that delivers new layers of security and Azure-inspired innovation for the applications and infrastructure that power your business.

New capabilities will help you:

Increase security and reduce business risk with multiple layers of protection built into the operating system.
Evolve your datacenter to save money and gain flexibility with software-defined datacenter technologies inspired by Microsoft Azure.
Innovate faster with an application platform optimised for the applications you run today, as well as the cloud-native apps of tomorrow.
Windows Server 2016 includes 3 main editions:

Datacenter: This edition continues to deliver significant value for organisations that need unlimited virtualisation along with powerful new features including Shielded Virtual Machines, software-defined storage and software-defined networking.
Standard: This edition is ideal for organisations that need limited virtualisation but require a robust, general purpose server operating system.
Essentials: This edition is designed for smaller organisations with less than 50 users.
These editions will be available for purchase on the October 2016 price list... Read more

A:Windows Server 2016 to launch in September

Nice share @Huracan wonder if it is going to be more secure than Windows 10.
 

Read other 1 answers
RELEVANCY SCORE 56.8

Download: Windows Server Technical Preview | TechNet Evaluation Center

Release Notes: Release Notes: Important Issues in Windows Server 2016 Technical Preview

Changelog: What's New in Windows Server 2016 Technical Preview 4

I may gonna test it out inside VMware
 

Read other answers
RELEVANCY SCORE 56.8

We have a 2016 server and BITS service getting stopped automatically after 2 minutes, We have done the troubleshooting like restore system health, sfc
/scan now and rename the software distribution and cat root but issue still same?

Read other answers
RELEVANCY SCORE 56.8

A couple of months ago I installed updates on a 2012 R2 server.  I use MBSA (2.3) to scan for patches to install.  Patches install.  I reboot then scan with MBSA again.  I've found three patches needed: KB2919335, KB4457034 and KB4457045. 
Installing these patches I get the following responses: 

2919335 & 4457045 both with code 240006 Hex meaning they are both already installed.  Checking, yes they are installed.  So, they installed the first time as they should have however MBSA still detects them as needed.  Why?

Secondly and similarly, patch 4457034 is detected as needed each time but it's return code is 8024017 Hex indicating the patch is not applicable.

I went ahead and searched the CBS.log and find this line for this last patch:
Package_for_KB4457034~31bf3856ad364e35~amd64~~6.3.1.2244, ApplicableState: 0, CurrentState:0

Why?  Does that indicate too that the patch is not applicable or that it is not available for install?

I have run sfc /scannow and it found no errors.

Additionally, I'm using the MBSA cab file from the original month, so MBSA will not know of any possible supersedance.

Read other answers
RELEVANCY SCORE 56.8

Hi...
I ran the MBSA 2.3 against a Server 2012 Hyper-V Core installation and the MBSA 2.3 report shoes 'The use of Internet Explorer is not restricted for administrators on this server.'
This seems like a false-positive. I don't believe Internet Explorer is installed on my Server 2012 Core installation. Is there a way to prevent this error from being listed?
Thanks,
Brett

Read other answers
RELEVANCY SCORE 56.4

Hi there, I am looking for Network drivers for the ThinkCentre M720s for use in Windows Server 2016. The reason for this is to allow a group of users to RDP into the PC in order to use an application. I have another PC of the same Modle type which shows Intel 219-V Network hardware installed, but cannot find the drivers needed for this. Any pointers most welcome!

Read other answers
RELEVANCY SCORE 56.4

Microsoft (R) Windows Debugger Version 10.0.17134.12 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Netlinkbackup\Desktop\MEMORY.DMP]
Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.


************* Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*C:\Windows\symbol_cache*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*C:\Windows\symbol_cache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 10 Kernel Version 14393 MP (32 procs) Free x64
Product: Server, suite: TerminalServer SingleUserTS
Built by: 14393.2273.amd64fre.rs1_release_1.180427-1811
Machine Name:
Kernel base = 0xfffff803`0b294000 PsLoadedModuleList = 0xfffff803`0b59b160
Debug session time: Fri Jun 15 15:59:32.052 2018 (UTC + 5:30)
System Uptime: 0 days 2:21:31.845
Loading Kernel Symbols
...............................................................
................................................................
.......................................
Loading User Symbols

Loading unloaded module list
.............
*********************************************... Read more

Read other answers
RELEVANCY SCORE 56.4

I've recently installed KB4467864 on my 2016 Datacenter SQL server and now when I try to login it just goes black. No GUI no errors. I've rebooted, I've tried safe mode, I've cold powered down and booted up and nothing fixes this. This is my 2nd server 2016
SQL server VM I've installed it on and both have the same issues. I have a Server 2016 datacenter SQL box that I hadn't installed this on yet and it works just fine. Last update it has is KB4467691. 

Anyone else seeing this? Or what else can I do to fix it? I've even tried stopping SQL server and agent to see if that would do it, but no difference. Please help I do not want to rebuild this SQL box. Thankfully its not quite in production yet but this
will put us behind if I have to redo the OS. 

Thank you!

Read other answers
RELEVANCY SCORE 56.4

Historically I've used the following syntax with NetMon to determine which switch/switchport each of my server interfaces are connected to: 

nmcap.exe /network "<interfacename>" /DisableLocalOnly /capture SNAP.EtherType == 0x2000 /StopWhen /TimeAfter 2 min /file "<filename>.cap"

With MMA, I can just do a filter for LLDP, and get the same information, at least on my Windows 10 laptop that is.  When I run a capture either locally on a Windows 2016 server, or remotely against
a Windows 2016 server there are no LLDP packets captured.

Am I doing something wrong?

Read other answers
RELEVANCY SCORE 56.4

Windows server 2016 activation error 0xc004c020
 in Virtual server environment how can I fix this

Read other answers
RELEVANCY SCORE 56.4

how i can uninstall or disable IE11 on Windows Server 2016?

Read other answers
RELEVANCY SCORE 56.4

We are using approx 10 server of windows server 2016 for diffrent application so please suggest for basic hardening 

Read other answers
RELEVANCY SCORE 56.4

Just bought new Spectre x360 convertible computer with Windows 2016. Left computer idle for a few minutes (15) and returned to screen saver.  Clicked on the enter button to get to password screen and entered password.  After entering it, the wheel of death started and kept spinning.  When I tried to turn the computer off, I may have accidentally hit stand by mode.  Then the screen started flashing.  I quickly unplugged everything.  It did come back on and I didn't lose anything.   What should I do so that this doesn't happen again?

Read other answers
RELEVANCY SCORE 56

I am trying to add Windows 10 clients to Windows Server essentials 2016. It seem that in order for the server to see the clients I must the clients join the server server Domain. (Currently they are in a workgroup).

It looks like one has to change the Windows10 clients to access the WSE-2016 DNS. So in windows 10 I go to networks, bring up the adaptor setting. Bring up "Internet Protocol Version 4 (TCP/IvP4) and instead of "Obtain the DNS address automatically" change it to always get the DNS address on the WSE-2016 (found with ipconfig).
Then within Windows I use ?System?, ?about?, and Join the server DOMAIN. It now works. The client can now see the Server domain.
I can then see the Server files and the server can see the Windows 10 shared files.
There are still problems however.
When I reboot the Windows 10 client. I have a brand new user screen with only some of my original desktop icons showing. Do I have to essentially rebuild up everything on my desktop again!
Question: Is there not a way to have my original desktop appear when I am joined to the Domain.
Second, since there will be times when the server is off I used the router static DNS IP address as the alternative address in the above dialog box of the Windows10 clients. Seems to work since the client can access the internet even with the WSE 2016 off.
Here is my second question. I have a few home laptops as well. If I force the DNS to the server what happens when I travel. ... Read more

Read other answers
RELEVANCY SCORE 55.6

I have just succeeded in hooking my Windows 10 client to Windows Server Essentials 2016. To do this I had to switch the W10 from a Workgroup to Domain setup.
All works fine except most of the desktop items originally on the client icons disappeared. Worse when I launce things like Outlook, Word etc. I have to initialize it from scratch.
How does one get all the settings, desktop icons etc. to re-appear on this new account that is now chanced from a Workgroup to a Domain setting.
I am an administrator (and only user) on both the W10 and WSE-2016. I see under users my original name on the W10/Workgroup and a new name. The new name does not have many files in it. I assume that?s the problem. But when I copy stuff from the old name folder across the programs are still not initialized correctly.

Read other answers
RELEVANCY SCORE 55.6

I am trying to install Windows Server 2016 Datacenter (new installation) on a RAID 0 (Striped Drive). The RAID system (Hardware RAID; Gigabyte z390 D) is configured on two SSDs (1 TB each).

Windows installer detects the RAID-Drive (of about 2 TB) and can create partitions on the drive and format them normally. The installation, however, is not possible on this drive (windows can not be installed on this drive).
I tried to download the preinstall-RAID-drivers and add them to the installer using USB-stick but it does not solve the problem. 
I am not sure whether I missed something at this point or even if this is possible to be acheived anyway. 
I appreciate your help.
Best regards

Read other answers
RELEVANCY SCORE 55.6

After installing Powershell DSC Resource. C drive Default Icon Get change. unable find why it is changing the icon. 


Amar Vaidya

Read other answers
RELEVANCY SCORE 55.6

Hello everybody
So  have this problem/question, so  have
a windows server 2016 standard evaluation  14393.rs1_release170731-1934,
and  have  two
updates KB3211320 and KB3192137, and the windows  me uninstall the updates, doesn't not even appear the button "Uninstall",
anyone knows how to remove this?

thank you for your help :)

Read other answers
RELEVANCY SCORE 55.6

kms activate of Windows7 Professional on Windows Server 2016 Standard.
We hava a problem.

We built kms host on Windows Server 2016 Standard.
We attempt to authenticate Windows 7 Professional.
But We can't authenticate  Windows 7 Professional
and ouccur below error messages.

 cscript slmgr.vbs /ipk xxxx-xxxx-xxxx-xxxx-xxxx???use Windows 7 professional kms key.
 error: 0xC004F050 The Software Licensing Service reported that the product key is invalid
 
and We confirmed below error messages.

 cscript slmgr.vbs /ipk xxxx-xxxx-xxxx-xxxx-xxxx???use Windows 10
 error: 0xC004F015 On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0xC004F015' to display

We want to solve this problem.
Please tell us this problem's soloution.

==============================================================
 1) We built kms host on Windows Server 2016 Standard(kms key)
 2) We built and enable to authenticate office 2010.

  Name : Microsoft Office 2010, KMSHost edition
  Description : Microsoft Office 2010 KMS, VOLUME_KMS channel
  Partial Product Key: Txxxx
  License Status: Licensed
==============================================================

Best regards.

Read other answers
RELEVANCY SCORE 55.6

Hi All

There's something I've been thinking about recently that I would like to ask the forum for your opinions.

I run a lab at home with about 30 Windows Server 2016 servers. They all have Windows Defender installed and I have a Group Policy which enables/configures certain features like Cloud Based Protection. I never ever browse the internet from any of these servers (I use my desktop with my SUA account for internet activity) and I don't share my servers with anyone else.

What I was wondering is:

To free up memory on my cluster and to reduce disk IO I was thinking of uninstalling Windows Defender on Windows Server 2016 using Powershell as follows:

Remove-WindowsFeature Windows-Defender, Windows-Defender-GUI

Now obviously this would mean I would have no AV/malware on these test servers but since I don't browse the internet from any of these machines the risk should be minimal (note I said minimal as I do accept having no AV has its risks/downside which I accept).

I may keep Defender installed on some servers that have ports open from the internet like my mail gateway (anti spam etc) but besides this I can't think of any other reason to keep Defender installed. All servers are behind a pfsense firewall in different VLANs and have tight firewall rules controlling traffic between them.

I don't have any kind of third party AV/anti malware installed. Everything I download gets checked on my desktop before copying to any of my test servers.
... Read more

Read other answers