Mbsacli

/qt		Do not display the report by default following a single-computer
		scan.
/qe		Do not display error list.
/qr		Do not display report list.
/q		Do not display any of the preceding items.
/unicode		Output Unicode.
/u	username	Scan using the specified username.
/p	password	Scan using the specified password.
/catalog	filename	Specify the data source that contains the available security update
		information.
/ia		Update the prerequisite Windows Update Agent components
		during a scan.
/mu		Configure computers to use the Microsoft Update website for
		scanning.
/nd		Do not download any files from the Microsoft website when
		scanning.
/xmlout		Run in updates only mode using only mbsacli.exe and
		wusscan.dll. Only these switches can be used with this option:
		/catalog, /wa, /wi, /nvc, /unicode
/l		List all reports available.
/ls		List reports from the latest scan.
/lr	filename	Display overview report.
/ld	filename	Display detailed report.
/rd	directory	Save or Retrieve reports from the specified directory.
/?		Display this help/usage.

Executing MBSACLI with no parameters scans the local computer for all checks and displays the report in text-mode.

Examples:

MBSACLI /n Password+IIS+OS+SQL

MBSACLI /d MyDomain MBSACLI /target 200.0.0.1 MBSACLI /r 200.0.0.1-200.0.0.50 MBSACLI /listfile export.txt

MBSACLI /ld "Domain - Computer (03-01 -2002 1 2-00 AM)" MBSACLI >c:\results.txt

MBSACLI /catalog c:\wsusscn2.cab /ia /nvc MBSACLI /wa

MBSACLI /xmlout /catalog c:\temp\wsusscn2.cab /unicode >results.xml MBSACLI /l /rd c:\scanreports