New Security Tool for IIS 5.0

[Microsoft Security Response Center <secure () MICROSOFT COM>]

-----BEGIN PGP SIGNED MESSAGE-----

Hi All -

We're pleased to announce that we've just released a new tool that
will help administrators ensure that their servers are up to date on
all IIS 5.0 security patches.  The tool, called HFCheck, is available
for download at http://www.microsoft.com/technet/security/tools.asp.
It works by comparing the IIS 5.0 patches installed on a server
against
a database of available ones, and advising whenever it finds that a
patch isn't installed.

The tool provides quite a bit of flexibility:
 - It can be run on-demand or, by using the Scheduler, run at
predetermined intervals.
 - It can check the patch status on the local machine, or on any
remote machine on which you have administrative privileges.
 - When it finds a patch that isn't installed on the machine, it can
display a pop-up dialogue or write to the event log.
 - It can consult the patch database hosted on the Microsoft web
site, or can use a locally-hosted copy that you've downloaded.

This is a version 1.0 tool.  The documentation discusses the tool's
current limitations, the most important of which is that it only
provides information on IIS 5.0 patches.  However, we'd like to get
customer feedback and develop an advanced version that works for
other products and provides additional features.  We'll look forward
to hearing your comments and suggestions.

Regards,

Scott Culp
Security Program Manager
Microsoft Security Response Center

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.3

iQEVAwUBObA/yI0ZSRQxA/UrAQGfbgf+KZ/KjPBtICuQkh2Qg4WxB7sNDgojrLkH
oVGIc4WULGwz8DEkXoSOQGHkL3Jt6AwqSPn35QcjyPm2jNYXWPoC7gwizoGgKqLx
e05EyUguyef2n61PTNnYOpOQQAreLlRHUZCbIDVzUUC0Zds2uSvp8gJfWPN1RmN8
TukbLyHwhiA1sUk+Pr5mXg3ufUDgwORaWB+oXj9b946hTGPDsaVsGlebvH31H35n
LoPz/kXhFX0fABV/7IjGQjGtLy/wJcqZgAL4bOP/CPNStqZ2VPUWHKLFWZ6sxVEn
kkPZ68Hjf7e1tKnBlB1j1DBU4hgkUx/SsXWCtzOFAkEz2m2Ewb5qnw==
=fyw9
-----END PGP SIGNATURE-----