Legacy Update: Get back online, activate, and install updates on your legacy Windows PC

Configuration Manager Vulnerability Assessment allows to scan managed systems for common missing security updates and misconfigurations which might make client computers more vulnerable to attack.

• Configuration Manager Vulnerability Assessment allows you to scan managed systems for common missing security updates and misconfigurations which might make client computers more vulnerable to attack.
  
  Software installation errors and misconfigurations compromise security and stability, resulting in escalated support costs. System Center Configuration Manager Vulnerability Assessment Configuration Pack can help prevent errors and security risks, increase your organizational uptime and help you to build a more secure infrastructure. This configuration pack provides vulnerability assessment reporting for common missing security updates and misconfigurations by using the configuration baselines in Configuration Manager. You can use it to monitor the configuration of Microsoft Windows operating systems, Internet Explorer, Microsoft Office, SQL Server, and Internet Information Services (IIS).

Files

Status: Deleted This download is no longer available on microsoft.com. The downloads below are archives provided by the Internet Archive Wayback Machine from the Microsoft Download Center prior to August 2020.

File	Size
ConfigMgr_VACP.msi SHA1: cce0f6ac0b006c7bd4ab83cbc5ad1122bf6d54a4	155 KB
EULA.docx SHA1: c52d1491f0f04b1853f70c220154cad2c8ef6114	12 KB
Vulnerability Assessment Configuration Pack.docx SHA1: 25ab4f56cda9161f8a0d01902c88ad2ece71396a	32 KB

• Prerequisites:
  The following are Prerequisites for Vulnerability Assessment Configuration Pack:
  1. The site server must be running one of the following:
  • System Center 2012 R2 Configuration Manager SP1 CU3 with Hotfix KB3153628 (A new Vulnerability Assessment Overall Report is available for System Center 2012 Configuration Manager)
  • System Center 2012 Configuration Manager SP2 CU3 with Hotfix KB3153628 (A new Vulnerability Assessment Overall Report is available for System Center 2012 Configuration Manager)
  • System Center Configuration Manager current branch - Note: The Configuration Pack can be imported to System Center Configuration Manager but the reports are not included. Reports will be released along with the current branch version 1606 of System Center Configuration Manager.
  2. The Configuration Manager clients require:
  • PowerShell 3.0 or later
  • The IIS feature: "IIS Management Scripts and Tools" installed
  • .NET Framework 4.5.2 or later

• To use this Configuration Pack
  
  • Import the three configuration baselines (Vulnerability Assessment: IIS Baseline, Vulnerability Assessment: SQL Server Baseline, Vulnerability Assessment: Windows Baseline). To understand in detail what each configuration item will be evaluating, review the properties of the configuration item.
  • Target to the baselines to a collection containing the computers you want to monitor. Policies will be evaluated and reported back to the site server. Note: you may need to wait for 24-48 hours depending on your inventory cycles.
  • Run the report and review the compliance results.
  
  Download
  
  1. Click the Download button on this page to start the download
  2. Do one of the following:
  • To start the installation immediately, click Run.
  • To save the download to your computer for installation at a later time, click Save.
  • To cancel the installation, click Cancel.