Microsoft Baseline Analyzer/HFNetChk Problem

[leedogg]

When I'm trying to run these applications they say they are unable to find my computer. The error I get is:

1 machines were not scanned because of Error: 230 - Scan not performed. Error # - 2138. Reason: The Workstation service has not been started.

Does anybody know how the security analyzer works and which service this corresponds to?...I dont have a "Workstation" service in my list of services...

 

[Un4gIvEn1]

were you aware that HFNetChk is no longer current? They have replaced it with Microsoft Baseline Security Analyser v1.1. Below is the link.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;320454

If you wish to continue to use HFNetChk you can take a look at this...

http://support.microsoft.com/default.aspx?scid=kb;EN-US;303215

I believe the name in Windows 2000 may be "lanmanworkstation" but the executable is svchost.exe.

Good Luck!

 

[Jim]

Have you got these two files installed? File & Printer Sharing for Micosoft Networks and Client for Micosoft Networks . Should put workstation back in your services. Here's a Pic...

 

[Enyo]

MBSA reqires Server and Workstation services.

HFNetChk does not require the server service.

To use HFNetChk install Client for MS networks as above.

To use MBSA you need file and printer sharing installed.

Ive put this to the devloper as something that should be revised in MBSA. Its not much of a help to alot of admins who dont want workstations to run the server service, hell not all servers should run the server services! Its only FnP sharing after all.

When you install the client and FnP sharing UNBIND them to maintain security.

 

[leedogg]

!!!! you guys rock. Installing those 2 network client/services did the trick.

@un4given. Yeah...I was using MSBA 1.1 but I was unable to scan my computer and there was no info as to why...went to a help site and found HFNetChk which produced the above error...which is probably the same problem MSBA was having..

@Enyo where and how exactly do I unbind these services?

 

[Enyo]

http://support.microsoft.com/?kbid=314604

Explanations:

http://grc.com/su-bondage.htm

 

[leedogg]

heh. basic stuff. I shouldnt have forgotten that... thanks enyo


fyi...

I get different results from msba and HfNetchk....

Hfnetchk actually listed Office vulnerabilities whereas MSBA just listed OS vulnerabilities...

 

[Enyo]

Well i would stick with hfnetchk (or LT) and qfecheck

BTW are you using HFNetChk.exe (free command line app) or HFNetChkLT (free version of HfNetChkPro)

http://www.shavlik.com/pHFNetChkLT.aspx

http://www.shavlik.com/pHFNetChkEXE.aspx