Has anyone heard if or used the Microsoft Baseline Security Analyzer?  I read about it in Windows XP Answers magazine and thought I'd give it a try.  It's supposed to scan your system for security holes, and recommend patches, etc.

On installing, I had a 'Malicious Script' alert from Norton, but I decided to allow it.  I then tried to run the scan, but it didn't seem to do anything.  I sat for a good 5 minutes watching a progress bar remain decidedly inactive, so in the end I gave up.

Has anyone any experience of this tool?  it sounds as though it could be quite useful, if it could be got to work.

It is a tool more suited to servers than home PCs Simon.

It checks the status of all the security patches for IIS webserver etc. and suggests various lock down procedures to ensure (yeah right) the security of your server.