56 Error: SUS file not found or invalid format. Valid entries are a URL of the\nSUS server or the file path to an approveditems.txt file.
57 Error: Both Username and Password must be set if using the -u or -p option. Scan not run.
58 Error: Unable to get the sus file approveditems.txt from:\nURL **%s**.
59 Error: No SUS file passed in and not in the registry.
60 Using log file hf.log in current working directory.\n
61 \nPlease use the -v switch to view details for\nPatch NOT Found, Warning and Note messages\n
64 Error: It was determined that there are no machines to scan. No scan was done.
65 Error: Error in resolving machines to scan. No scan was done.
66 Can not create a Scan object\n
67 Cannot create MSXML object.\nMake sure the latest version of MSXML is correctly installed.\n
68 Unable to load XML data.\n
69 Can not load XSL file.\n
70 Unable to apply XSL to XML.\n
72 MBSACLI [/c|/i|/r|/d domain] [/n option] [/o file] [/f file] [/qp] [/qe] [/qr]\n\nMBSACLI [/e] [/l] [/ls] [/lr file] [/ld file] [/unicode] [/hf] [/?]\n\nDescription:\n This is a command line interface for Microsoft Baseline Security Analyzer\n\nParameter List:\n
73 /c domain\computer Scan named computer.\n\n /i IP Scan named IP address.\n\n /r IP-IP Scan named IP addresses range.\n\n
74 /d domain Scan named domain.\n\n /n option Select which scans to NOT perform.\n All checks are performed by default.\n Valid values:\n "OS", "SQL", "IIS", "Updates", "Password",\n Can be concatenated with "+" (no spaces).\n\n
75 /o filename Output XML file name template.\n Default: %D% - %C% (%T%).\n\n /f filename Redirect output to a file.\n\n /qp Don't display scan progress.\n\n
76 /qe Don't display error list.\n\n /qr Don't display report list.\n\n /q Do not display any of the preceding items\n\n /s 1 Suppress security update check notes.\n\n /s 2 Suppress security update check notes and warnings.\n\n /nvc Do not check for a new version of MBSA.\n\n
77 /baseline Check only for baseline security updates.\n\n /nosum Security update checks will not test\n file checksums.\n\n /sus [susserver | susfilename] Specify the URL of the SUS server or the\n file path to the approveditems.txt file. If a URL\n or path is not specified, then the value stored in\n the registry will be used if available.\n\n /e List errors from the latest scan.\n\n /l List all reports available.\n\n
78 /ls List reports from the latest scan.\n\n /lr filename Display overview report.\n\n /ld filename Display detailed report.\n\n /v Display security update reason codes.\n\n /unicode Output Unicode.\n\n /hf Run in HFNetChk mode.\n Run with /hf -? for hfnetchk help\n The /hf must be the first command line parameter.\n\n
79 /? Display this help/usage.\n\nExecuting MBSACLI with no parameters scans the local computer.\n\nExamples:\n MBSACLI\n MBSACLI /n Password\n MBSACLI /c MyDomain\MyComputer /n Password+Updates+SQL\n MBSACLI /d MyDomain\n MBSACLI /i 200.0.0.1\n MBSACLI /r "200.0.0.1-200.0.0.50"\n MBSACLI /l\n MBSACLI /ld "Domain - Computer (03-01-2002 12-00 AM)"\n MBSACLI /f "C:\results.txt"\n MBSACLI /sus "http://corp_sus"\n MBSACLI /hf -?\n\nThe MBSA V1.2 graphical interface default parameters are:\n For scans: /nosum /baseline\n For reports: /v\n
86 Description:\n The MBSACLI tool assesses a machine or group of machines for security\n hotfixes that have either been installed and/or need to be installed.\n For more information on this tool, please refer to Microsoft Knowledge\n Base Article 303215.\n\nParameter List:\n\n
87 -about About mbsacli.\n\n -h hostname Specifies the NetBIOS machine name to scan.\n Default is the localhost.\n\n -fh hostfile Specifies the name of a file containing\n NetBIOS machine names to scan. One name per\n line, 256 max per file.\n\n -i ipaddress Specifies the IP address of a machine to scan.\n\n -fip ipfile Specifies the name of a file containing\n addresses to scan. One IP address per\n line, 256 max per file.\n\n
88 -fq ignorefile Specifies the name of a file containing\n Q numbers to ignore. One Q number per line.\n\n -r range Specifies the IP address range to be scanned,\n starting with ipaddress1 and ending with\n ipaddress2 inclusive. <ipaddress1-ipaddress2>\n\n -d domainname Specifies the domain name to scan. All\n machines in the domain will be scanned.\n\n -n All systems on the local network will be\n scanned. (i.e., all hosts in Network\n Neighborhood)\n\n
89 -history level Displays hotfixes that are:\n (1) explicitly installed\n (2) explicitly not installed\n (3) effectively installed\n This switch is not necessary for normal\n operation. Do not use this switch unless you've\n read -history usage in 303215.\n\n -t threads Number of threads used for executing scan.\n Possible values are from 1 to 128. Default is 64\n\n -o output Specifies the desired output format.\n (tab) outputs in tab delimited format.\n (wrap) outputs in a word wrapped format.\n Default is wrap.\n\n
90 -x datasource Specifies the xml datasource containing the\n hotfix information. Location may be an xml\n filename, compressed xml cab file, or URL.\n Default is mssecure.cab from the Microsoft\n website.\n\n -s suppression Suppresses NOTE and WARNING messages\n 1 = Suppress NOTE messages only\n 2 = Suppress both NOTE and WARNING messages\n Default is to show all messages\n\n -nvc Do not check for new version of MBSA.\n\n -z Do not perform registry checks. (Note when this\n switch is used with -history, registry checks\n will still be performed for those patches that\n only have registry key data and no file version\n information in the mssecure.xml file)\n\n -nosum Do not evaluate file checksum.\n The checksum test calculates the checksum of\n files. This can use up large amounts of\n bandwidth. Using this option will speed up a\n scan and use less bandwidth. File version\n checks will be still done.\n\n
91 -b Display the status of hotfixes required to\n meet minimum baseline security standards.\n This scans for updates marked as critical\n security updates in Windows Update.\n\n -v Displays the details for Patch NOT Found,\n WARNING and NOTE messages. Enabled by default\n in tab mode.\n\n -f outfile Specifies name of the file to save the results.\n Default is to display to screen.\n\n -u username Specifies optional user name for login\n to remote computer.\n\n -p password Specifies password to be used with user name.\n\n
92 -sus [susserver | susfilename] Specify the URL of the SUS server or\n the file path to the approveditems.txt file. If\n a URL or path is not specified, then the value\n stored in the registry will be used if\n available.\n\n -sum Perform file checksum tests.\n Force checksum tests to be run on non-English\n language systems. Use only if you have a custom\n XML file with language-specific checksums.\n\n -unicode Output Unicode.\n\n -? Displays this menu.\n\n
101 \nError: Failed to initialize unicode output library.\n
103 \nA new version of MBSA is available!\nPlease visit the MBSA homepage to download the latest version at:\n%s\n\n
104 \nThis version of Microsoft Baseline Security Analyzer has expired.\nPlease upgrade to the released version.\n\nMicrosoft Baseline Security Analyzer updates are available at:\n http://go.microsoft.com/fwlink/?LinkId=16534\n
105 Error: Number of threads used for executing a scan must be between 1 and 128. Default is 64.
106 Checks to exclude from scan are missing.
107 Invalid check name: %s
108 Error: ** -history - Invalid parameter. Only 1 2 or 3 are allowed **
110 Invalid parameter: %s %s
111 Option %s requires a parameter\n
500 Scanning
501 Done scanning
502 ----------------------------
503 SP1
507 LoadDocumentSync - Caught exception
509 LoadDocumentSync Failed - m_pIXMLDOMDocument is 0
514 Name
541 Issue
542 Summary
555 No Error
556 WNetGetLastError Error %d seeking text for %d
557 Provider %s Error %d (%s)
558 No verision info
559 Out of memory, cannot scan
560 Error:
561 Error: Not able to open shavlikscanerrors.htm
562 Using %d as TC
563 Adding to Ignore list - %s
564 Adding to list - %s
565 %s failed with code %ld;
566 Error: Unable to find domain:
567 Adding computer %s
568 Add %s from workgroup %s
570 In Resolve Domain exit 1 - Netapi32.dll not found. domain resolution stopped, domain %s.
571 Netapi32.dll not found. domain resolution stopped, domain %s
572 Attempting to enumerate machines for domain:
573 %s, enumeration stopped, domain %s
574 Domain resolution determined the number of computers on domain %s is %d
575 Error: Unable to enumerate machine accounts from domain controller for domain %s. Please ensure that you have administrative rights to the domain controllers for this domain.
695 This is US English BUT more than 1 language versioned.
696 ***** GetFileVersionInfoSize returned eror = %d *****
697 Error: Error description -2: %s.
698 Error: Error description -1: %s.
699 Error: Specific message for this is: %s.
700 Error: Unable to determine the OS language. Checksum tests will not be done unless the -sum command is used.
701 Error: Unable to determine the OS language. Checksum tests will not be done unless the -sum command is used. This is probably due to the share not being available.
702 FAILED IN TESTACESS for NTDLL. Error description -2: %s
703 FAILED IN TESTACESS for NTDLL. Error description -1: %s
704 Looking for file **%s**.
705 LatestOSSP(): Failed to get OS m_CurrentServicePackID info from the xml
706 LatestOSSP(): Read from the xml
707 LatestOSSP(): Failed to Read product from the xml
709 No Information
713 SP Unknown
723 Unable to read Exchange Bulletin information from XML \n in the XML file.
724 There are no security updates for
725 Unable to read ServicePack information from XML for
726 TestIE ServicePack.Read failed for product %s.
728 TestExchange product.Read failed: Error is: %s\n information not available from XML
738 *** WMP Version test. File %s not found or is not accessible. GetLasterror returned %d. File handle was NULL or INVALID_HANDLE. Unable to test for WMP
739 *** WMP Version test. File %s not found or is not accessible. GetLasterror returned %d. File handle was NULL or INVALID_HANDLE. Checking for V 6.4
740 SQL Server and/or MSDE Version = %s
743 SQL Server and/or MSDE Version (2) = %s
744 SQL Server and/or MSDE
747 Unable to read SQL Server and/or MSDE Bulletin information from XML
748 Unable to read SQL Server and/or MSDE information from XML
749 Warning
750 Informational
751 PatchFound
752 MissingPatch
753 Note
758 Error: Save scan result failed. Reason: %s
759 COutput::OutputResult default
762 No SQL Server and/or MSDE Found %s
763 Key Open failed getting SQL Server and/or MSDE path
764 Key Opened, getting SQL Server and/or MSDE path (3)
765 Default Instance Found - no Installed Instances
766 NO NAMED INSTANCES InstalledInstances not found
767 Key Opened, getting SQL Server and/or MSDE path (2)
768 Named Instance - Trying to open key %s
769 Key Opened, getting SQL Server and/or MSDE (1)
770 Default Instance Trying to open RK
771 InstalledInstances
772 Microsoft SQL Server and/or MSDE Server exists
773 Trying for Getting named instances
774 Error: %X
775 Unknown Error!
776 The RecordSet is NULL
777 SetupIPRules failed - 3: Error is = **-->%s<--**
778 SetupIPRules failed - 2: Error is = **-->%s<--**
784 SetupIPRules failed - 1: Error is = **-->%s<--**
788 SetupIPReasons failed - 1: Error is = **-->%s<--**
790 SetupScanItems failed - 1: Error is = **-->%s<--**
794 SetupProducts failed - 1: Error is = **-->%s<--**
799 SetupIPaches failed - 1: Error is = **-->%s<--**
811 Failed to add a Reason - ReasonID m_strError = **-->%s<--**
813 Adding MachineID --- Name = %s, IP = %s
814 In function Verify
815 Cab (%s) file was not found.
816 Cab (%s) file was not able to be read (Possible read permissions) .
817 Cab (%s) file was not signed or the user said don't accept.
818 XML will not extract from %s.
819 System error getting machine information.
820 Error: System error getting machine information.
821 Machine not found.
822 Error: Machine not found.
823 Error: MBSA is unable to scan this machine. Please check to see that you have administrative rights to this machine and are able to login to this machine from your workstation.
824 Error: Scan not performed. Error reading Registry.
825 Service pack registry key could not be found
826 Error: Service pack registry key could not be found.
827 Remote registry access denied
828 Error: Remote registry access denied.
829 NOT an Admin
830 Error: Administrator rights are required to scan.
831 Scan NOT Allowed
832 Done Scanning for Latest Available SP
833 Scanning OS Service Pck
834 Done Scanning OS
835 Scanning OS
836 Done Scanning IIS
837 Scanning IIS
838 Done Scanning SQL Server and/or MSDE
839 Testing SQL Server and/or MSDE instance =
840 Scanning SQL Server and/or MSDE
841 Done Scanning Exchange
842 Scanning Exchange
843 Done Scanning WMP
844 Scanning WMP
845 Done Scanning IE
846 Scanning IE
847 GetWkstaInfo - NWGI Error is:
848 GetWkstaInfo: NWGI : Error is:
849 Tried the DSN name. Now trying IP
850 Started at
851 GetServerInfo: NSGI - Error is:
852 GetServerInfo: NSGI: Error is:
853 NSGI completed at
854 IP
855 Registry access not available. Error =
856 GetServicePack fails with
857 Reg.Open of SYSTEM\CurrentControlSet\Control\Windows failed.
871 Services
872 Unable to perform test. Uable to determine if the file exists. The test was not completed. Error # is
873 File handle for
874 was NULL
875 GetLasterror returned
876 File Access Error for file
877 error Number =
878 detail -
879 Error: File Access Error. Details:
880 Error: File Access Error for file:
881 Details:
882 Unable to access file
883 Please see 305385 for more information.
884 Unable to validate patch status. MBSA was not able to access file
885 Please see 305385 for more information. The specific error number is:
886 Unable to find file
887 Filename in test access is empty
888 TestSystemRootAccess - Failed. Error =
889 IS BEING SUSSED
890 Comparing Patch to Patch
891 Comparing SUSpatch to Approved SUSPatch
892 Testing for IsBeingSUSSED
893 GetFileVersionInfoSize returned eror =
894 Error: Error description -2:
895 Error: Error description -1:
896 Error: Specific message for this is:
897 FAILED IN TESTACESS for NTDLL. Error description -2:
898 FAILED IN TESTACESS for NTDLL. Error description -1:
899 Outlook
900 There are no security updates related to this product in the XML database.
901 The latest Service Pack for this application has not been installed. Please install the latest service pack before evaluating this system against baseline security standards.
902 The latest service pack for this product is not installed.
903 Currently
904 is installed.
905 The latest service pack is
906 No information for this products Current Service Pack ID is available in the Hotfix Database
907 There is no information about this product's minimum supported service pack level in the XML file.
908 There is no information about this product's service pack level in \n the XML database
909 There are no security updates for this product in the XML file.
911 Internet Information Services
912 All necessary hotfixes have been applied.
913 No hotfixes are missing or installed.
914 No hotfixes are installed.
915 All baseline security hotfixes have been applied.
916 No baseline hotfixes are missing or installed
917 No baseline hotfixes are installed
918 FAILED IN TESTACESS. Error description:
919 Unable to read IIS Bulletin information from XML
920 Unable to read Current Service Pack ID from XML
921 Unable to read Minimum Supported Service Pack ID from XML
922 Unable to read IIS information from XML
923 Unable to read Exchange Bulletin information from XML
924 in the XML file.
925 TestIE ServicePack.Read failed for product
926 TestExchange product.Read failed: Error is:
927 information not available from XML
928 Unable to read WMP Bulletin information from XML
929 TestWMP ServicePack.Read failed for product
930 Unable to read WMP information from XML
931 Unable to read IE Bulletin information from XML
934 SQL Server and/or MSDE Version =
935 SQL Server and/or MSDE Version (2) =
936 GetSQLServicePack - SQL Server and/or MSDE Service Pack is
983 file was not able to be read (Possible read permissions) .
984 file was not signed or the user said don't accept.
985 XML will not extract from
986 Extraction of XML from CAB failed
987 Download of CAB failed
988 XML successfully loaded.
989 Error: All attempts to load xml failed.
990 No Hotfix XML Loaded. All attempts to load xml failed
991 Error: Failed to load xml from local CAB
992 Attempting to load local XML
993 Attempting to load XML from local CAB
994 Error: Failed to load default xml
995 Attempting to load XML from
996 Error: Failed to load xml from default CAB
997 Attempting to load default XML
998 Failed to load default CAB
999 Attempting to get CAB from
1000 Attempting to load default CAB
1001 Opening regkey
1002 The returned error is:
1003 The results for this machine may not be reliable
1004 this machine
1005 ********************RegOpen for key
1006 failed. Setroot
1007 ERROR: RegConnect for Machine
1008 with a root of
1009 returned error
1010 Querying regkey
1011 KEY is not SZ either
1012 cannot be located.
1013 has an invalid checksum.
1014 greater than what is expected
1015 has an invalid checksum and its file version
1016 is equal to what is expected
1017 that is less than what is expected
1018 has a file version
1019 that is greater than what is expected
1020 File
1021 should be deleted.
1022 Invalid checksum for file
1023 Access denied to file:
1024 There are no security updates available for this product.
1025 File version is greater than expected.
1026 File version is less than expected.
1027 Patch NOT Found
1028 Patch Found
1029 Machine Name Product Bulletin Q Number Reason Status
1030 Attempting to load from local CAB
1031 Attempting to load
1032 Error: Failed to load
1033 Error: Failed to load default CAB
1034 Error: 235 - System not found, or NetBIOS ports may be firewalled. \n Scan not performed.
1035 A required registry key does not exist. It is necessary in order \n for this patch to be considered installed.
1036 This product is no longer supported by Microsoft. The latest version\n of MSXML should be installed.
1037 Error: Unable to load the XML file from the following location -
1038 Error: Scan not performed on machine:
1039 - The limit is 50 machines at one time for the selected output format.
1040 Error: 200 - System not found. Scan not performed.
1041 *Error*
1042 Error: 201 - System not found. The requested address is not valid.
1043 A required registry key does not exist. It is necessary in order for this patch to be considered installed.
1044 The latest Service Pack for this application has not been installed.\n Please install the latest service pack before evaluating this system\n against baseline security standards.
1045 Reason:
1046 Port
1047 Ports
1048 System not found.
1049 The latest service pack\n is
1050 The latest service \n pack is
1051 INTERNET INFORMATION SERVICES
1052 Error: 801 - No XML was loaded for the language of the machine.
1053
1054 A registry key has the wrong value.
1055 Error: 553 - Unable to read registry. Please ensure that the remote\n registry service is running. Scan not performed.
1056 Error: 261 - System found but it is not listening on NetBIOS ports.\n Scan not performed.