HP 4320t - Mobile Thin Client Montageanleitung

Using Microsoft®

Baseline Security

Analyzer 2.2

and WindowS®Update

For HP Thin Clients running Microsoft

Windows Embedded Standard 7

Table of Contents:

Microsoft Baseline Security Analyzer 2.2..............................................................2

Preface ...........................................................................................................2

Introduction ....................................................................................................2

Background ....................................................................................................2

Installation on WES 7 ......................................................................................3

Scanning Options............................................................................................6

Key Options for Thin Clients: ...................................................................6

Features..........................................................................................................7

Enhanced Reporting:...............................................................................7

Using Microsoft Baseline Security Analyzer 2.2 ................................................7

Using the MBSA GUI with WES 7.............................................................7

Using MBSA Command-line with WES 7 ................................................11

Using MBSA in OFF-line Mode with WES 7 ............................................14

Localizations .................................................................................................18

Issues ...........................................................................................................18

Using Windows Update on WES 7 .....................................................................18

Introduction ..................................................................................................18

Audience ......................................................................................................19

Overview......................................................................................................19

RAM Drive Considerations.............................................................................19

Good News about WES 7 Quick Fix Engineering (QFE) Releases .....................20

Disk Space Concerns .....................................................................................20

HP Windows Update Perspective ...................................................................20

How to Enable Windows Update ...................................................................21

HKEY Local Machine .............................................................................21

HKEY Current User................................................................................21

Microsoft Baseline Security Analyzer 2.2

Preface

The scope of this document is focused on how customers can identify the most

current Microsoft Quick Fix Engineering (QFE) releases and Security Updates that

are applicable to their Golden Master image and is not concerned with the process

of downloading and deploying these items.

The Microsoft Baseline Security Analyzer (MBSA) solution presents a Microsoft-

supported method for discovering and identifying security updates, on-demand,

without the customer having to wait for the same update to be packaged, tested,

and then delivered to http://www.hp.com/. This process is recommended by HP

for identifying necessary security updates.

Introduction

This white paper describes the application of MBSA on HP thin clients with WES 7

for the purpose of assessing the security state and detecting missing security

updates for this platform.

Background

To easily assess the security state of Windows machines, Microsoft offers the free

Microsoft Baseline Security Analyzer (MBSA) scan tool. MBSA includes a graphical

and command line interface that can perform local or remote scans of Microsoft

Windows systems.

MBSA 2.2 runs on Windows Server®2008 R2, Windows 7, Windows Server

2008, Windows Vista™, Windows Server 2003, Windows XP and Windows

2000 systems and will scan for missing security updates, rollups, and service packs

using Microsoft Update technologies. MBSA also scans for common security

misconfigurations (also called Vulnerability Assessment checks) using a known list of

less secure settings and configurations for all versions of Windows; Internet

Information Server (IIS) 5.0, 6.0, and 6.1; SQL Server 2000 and 2005; Internet

Explorer®(IE) 5.01 and later; and Office 2000, 2002, and 2003 only.

To assess missing security updates, MBSA only scans for missing security updates,

update rollups, and service packs available from Microsoft Update. MBSA does not

scan or report missing non-security updates, tools, or drivers.

Installation on WES 7

The MBSA graphical user interface (GUI) is a simple and seamless installation

process for WES 7 that only takes approximately 2 Mb of disk space.

Windows Update must be enabled first, go to Control Panel and open Windows

Update:

1. Click Change Settings.

2. Under Important Updates, choose Never check for updates..., then click OK.

Windows Update is now active:

3. Install MBSA 2.2. Once finished, the Write Filter must be committed and the

system rebooted:

Scanning Options

Key Options for Thin Clients:

Check for Security Updates

Select this option to check the target computer for missing Microsoft Windows

updates. When you select this option, you can also specify the following options:

Configure Computers for Microsoft Update and Scanning

Prerequisites

Select this option to install the current version of the Windows Update Agent on the

target computer, if it is absent or out of date, and to configure the target computer

to meet other requirements for scanning for security updates.

Scan Using Update Services Servers Only

Select this option to scan only for those security updates that are approved on the

computer's assigned Windows Server Update Services (WSUS) server. The

Microsoft Update website or an offline catalog is not used.

Scan using Microsoft Update Only

Select this option to use only the security update catalog downloaded from the

Microsoft Update website to determine the updates to be checked. Updates that are

not approved on the computer's WSUS server are reported as though they were

approved. If the Microsoft Update website cannot be reached by the client, an error

is reported.

Features

Enhanced Reporting:

•Current Update Compliance appears in the report; installed and needed

updates are reported together in a single scan report.

•Maximum bulletin severity and update package download links are now

available in report details.

•Access to the live Microsoft Update site for published content for live (online)

security update assessment, as well as an off line catalog for customers with

limited or secure internet access are provided.

•Command-line option to redirect reports to a user-selected directory or network

share using /rd option is available.

•Reports can now be easily shared and viewed.

•Multiple copies of MBSA can be run for increased scanning performance.

•Structured XML output offers simplified integration for update scanning.

•Specific web links are available for locating updates and taking necessary

actions.

Using Microsoft Baseline Security Analyzer 2.2

Using the MBSA GUI with WES 7

The target system must be connected to the Internet in order to download the current

Microsoft Security Update database.

1. Click Scan a computer.

2. Select options and click Start Scan.

MBSA downloads the current Security Update Database and scans the target

system.

After scanning is complete, the report is immediately generated.

3. In the Security Update Scan Results, select the top Security Update listed (MS1

0-046).

The Microsoft webpage for the Security Update (MS1 0-046) appears.

4. Scroll down and select the applicable operating system. For WES 7, it is

Windows 7 for 32-bit Systems.

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere HP Software Handbücher

HP Data Protector Bedienungsanleitung

HP D6030A - NetServer - E50 Bedienungsanleitung

HP Presario SG1100 - Desktop PC Bedienungsanleitung

HP ProLiant BL420c Bedienungsanleitung

HP HSG80 - StorageWorks RAID Array Controller Bedienungsanleitung

HP StoreFabric SN6500B Service-Handbuch

HP Data Protector A.06.11 Bedienungsanleitung

HP T9576G06 Bedienungsanleitung

HP HP LaserJet 2605, 2605dn, 2605dtn Service-Handbuch

HP 2230s - Compaq Business Notebook Bedienungsanleitung

HP 418800-B21 - StorageWorks Modular Smart Array 70 Storage... Installationshandbuch

HP Xw25p - ProLiant - Blade Workstation Bedienungsanleitung

HP D2D Bedienungsanleitung

HP DDL D40 Bedienungsanleitung

HP AB500A - Integrated Lights-Out Advanced Bedienungsanleitung

HP NetServer AA 6200 Service-Handbuch

HP StorageWorks 2/16 - SAN Switch Bedienungsanleitung

HP D6030A - NetServer - E50 Bedienungsanleitung

HP Bc1500 - BladeSystem - Blade PC Bedienungsanleitung

HP BB118BV - StorageWorks Data Protector Express... Gebrauchs- und Pflegehandbuch

HP BB118BV - StorageWorks Data Protector Express... Bedienungsanleitung

HP Deskjet 812c Bedienungsanleitung

HP Kayak XU700 Bedienungsanleitung

HP Compaq Presario,Presario 4400 Bedienungsanleitung

Beliebte Software Handbücher anderer Marken

COMPRO

COMPRO COMPROFM Bedienungsanleitung

Muratec

Muratec OFFICEBRIDGE ONLINE Bedienungsanleitung

Oracle

Oracle Contact Center Anywhere 8.1 Bedienungsanleitung

Adobe

Adobe 65007312 - Photoshop Lightroom Handbuch

Avaya

Avaya NULL One-X for RIM Blackberry Bedienungsanleitung

PS Audio

PS Audio PowerPlay Betriebsanleitung

Brady

Brady LOCKOUT PRO 3.0 Service-Handbuch

Avaya

Avaya Interaction Center Bedienungsanleitung

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Handbuch

Novell

Novell GROUPWISE 8 - INTERNET AGENT Bedienungsanleitung

Oracle

Oracle Application 9i Bedienungsanleitung

Acer

Acer RDM Bedienungsanleitung

Canon

Canon Vixia HF21 Bedienungsanleitung

Canon

Canon ZR950 Bedienungsanleitung

Samsung

Samsung Auto Backup Bedienungsanleitung

Polycom

Polycom Vortex EF2201 Montage- und Bedienungsanleitung

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Bedienungsanleitung

Novell

Novell SP2 - S Bedienungsanleitung