Differences

This shows you the differences between two versions of the page.

--- guides:mbsa_troubleshooting [2020/05/13 22:02] – brett.zamora
+++ guides:mbsa_troubleshooting [2020/05/13 22:42] (current) – brett.zamora
@@ Line 6: / Line 6: @@
 Although the MBSA tool is not fundamentally supported under Windows 10, it does work, however, some tweaks may be required in order to obtain a clean (Strong Security) MBSA report. These tweaks are outlined below.
-=== Tip 1: ===
+=== MBSA Tip 1: ===
 The MBSA tools must be able to communicate with a master Windows Update catalog. In some environments this catalog is served up from a Windows Server Update Services (WSUS) server. If the MBSA tools has difficulty communicating with the WSUS server, you will see an indication of this in your report.
@@ Line 21: / Line 21: @@
-=== Tip 2: ===
+=== MBSA Tip 2: ===
@@ Line 41: / Line 41: @@
-=== Tip 3: ===
+=== MBSA Tip 3: ===
+The MBSA tool will flag all accounts that are configured with non-expiring passwords. It is not uncommon for IT groups manage the passwords of some user accounts outside of the normal Windows process. If you get flagged for 'Non-Expiring Passwords' there is a file that you can be used to indicate that certain user accounts should not be flagged.
+You can edit the following file:
+C:\Program Files\Microsoft Baseline Security Analyzer 2\NoExpireOk.txt
+Add the user accounts that are approved to have non-expiring passwords to the preceding file and then run the MBSA report again.