Support information for the SMS security update scan tools

This article contains support information for the Microsoft Systems Management Server (SMS) security update scan tools.

The functionality of the legacy SMS security update scan tools is based on either the Microsoft Baseline Security Analyzer (MBSA) technology or the Enterprise Scan Tool (EST) technology. The following SMS update scan tools are based on Microsoft Baseline Security Analyzer (MBSA) version 1.2:

• SMS 2003 Security Updates Inventory Tool (SUIT)
• SMS 2.0 Software Update Services Feature Pack

The following SMS update scan tool is based on the Enterprise Scan Tool (EST) technology:

• SMS 2.0/2003 Extended Security Updates Inventory Tool (ESUIT)

The security update catalog (MSSecure.xml) for the stand-alone versions of these scan tools will not be updated after October 9, 2007. The catalogs for the SMS tools that use the MBSA and EST technologies will be updated as needed until August 14th, 2009.

Technical limitations in the SMS security update scan tools that are based on the MBSA and EST technologies do not allow the tools to run on newer operating systems. SMS security update scan tools that are based on the MBSA and EST technologies will neither run nor support scanning for missing security updates on the following operating systems:

• The x64-based versions of Windows Server 2003
• Server operating systems that were released after Windows Server 2003
• The x64-based and embedded versions of Windows XP
• Desktop operating systems that were released after Windows XP

SMS security update scan tools that are based on the MBSA and EST technologies will not scan for missing security updates on versions of products that were manufactured after the following:

• Internet Information Services (IIS) 6.0
• Microsoft Internet Explorer 6
• Microsoft Windows Media Player 10
• Microsoft Exchange Server 2003
• Microsoft Windows SharePoint Services 2.0
• Microsoft SQL Server 7
• Microsoft Data Access Components (MDAC) 2.8
• Microsoft XML (MSXML) 6
• Microsoft Virtual PC 2004
• Microsoft Virtual Server 2005
• Microsoft Virtual Server 2005 R2
• Microsoft Content Management Server 2002
• Microsoft Commerce Server 2002
• Microsoft BizTalk Server 2004
• Microsoft Host Integration Server 2004
• Microsoft FrontPage Server Extensions: any version that was included with Windows operating systems before Windows Vista
• Windows Script: all versions that are native to Windows operating systems before Windows Vista

For more information about MBSA 1.2.1, click the following article number to view the article in the Microsoft Knowledge Base:

The list of products that the MBSA and EST scan tools support is hard-coded into the update catalog file. The list of products will not be updated. Additionally, the tools will not be updated to run on newer operating systems. Microsoft is committed to unifying the Windows Server Update Service (WSUS) technologies for future product security update management. These technologies include Microsoft Update, WSUS Server, and SMS with the Inventory Tool for Microsoft Update (ITMU). ITMU is the security update scan tool on which SMS 2003 will rely for future product versions. For more information about the SMS ITMU scan tool, visit the following Microsoft Web site: