The strategies we have discussed so far are based on best practices and assist in devising a stable security plan pertaining to both the management operating system, the VMs and the underlying framework. Microsoft offers tools to help you identify exposed vulnerabilities, and suggests best practices to further harden your environment and also streamline the hardening procedures. Let's look at a few of the freely available tools and see how they fit the purpose.
The Microsoft Baseline Security Analyzer (MBSA) is a free utility available on the Microsoft downloads site and is primarily used to identify vulnerabilities against a predefined security baseline. You may download it from here:
The tool has a simple installation process and may require elevated privileges during install and launch. Once installed, you may easily invoke the executable from the programs list and it will present you with its GUI...