Windows Security Analyzer

This tool runs over 100 tests to gauge server security against best practices. Some tests include explanations and background information. It also calculates entropy and NIST Special Publication 800-63 compliance. The Windows Configuration Security Analyzer comes with a DOS batch script that system administrators can run on their servers to gather data for the Analyzer. Unlike other tools, the batch script is easy to read and understand so system administrators can be comfortable with the information they will extract from production servers. This tool was designed to help with information systems security audits, but anyone can use it to evaluate their system security. An optional feature allows users to send anonymous statistics.