Download details: Microsoft Baseline Security Analyzer v2.0 (for IT Professionals)

Good resource - should be a part of every DBAs toolbox, whether or not SQL Server is your database of choice (it includes a tool to find all rouge MSDE instances on a network).

Download details: Microsoft Baseline Security Analyzer v2.0 (for IT Professionals): "In response to direct customer need for a streamlined method of identifying common security misconfigurations, Microsoft has developed the Microsoft Baseline Security Analyzer (MBSA). Version 2.0 of MBSA includes a graphical and command line interface that can perform local or remote scans of Windows systems. MBSA runs on Windows Server 2003, Windows 2000, and Windows XP systems and will scan for common security misconfigurations in the following products: Windows 2000, Windows XP, Windows Server 2003, Internet Information Server (IIS) 5.0, and 6.0, SQL Server 7.0 and 2000, Internet Explorer (IE) 5.01 and later, and Office 2000, 2002 and 2003. MBSA also scans for missing security updates, update rollups and service packs published to Microsoft Update."