Migrating existing MBSA Security Scan Results between Servers

Microsoft Baseline Security Analyzer (MBSA) checks for available updates to the operating system, Microsoft Data Access Components (MDAC), MSXML (Microsoft XML Parser), .NET Framework, and SQL Server. MBSA also scans a computer for insecure configuration settings. When MBSA checks for Windows service packs and patches, it includes in its scan Windows components, such as Internet Information Services (IIS) and COM+.

If you ever need to move MBSA from one server to another you may notice, once you have installed MBSA on your destination server that your existing security scan reports are no longer available and the option is greyed out:

You can migrate the existing Security Scan Results to the new destination server to retain your scan history.

1. Close MBSA on the destination server
2. On the Source server navigate to the User folder for the user which was used to Run MBSA
3. Copy all the .mbsa file from the SecurityScans folder in the users root folder (eg. C:\Users\Administrator\SecurityScans)
4. Paste the copied files into the same path on the destination server
5. Open MBSA on the destination server and your existing security scan reports are rebuilt based on the files you have just copied onto the destination server and can be viewed from the home screen or the Tasks Menu.

For more information about MBSA please visit How To: Use the Microsoft Baseline Security Analyzer

To download MBSA 2.3 please visit the Microsoft Download Centre