Via The Register a handy tip about Microsoft Baseline Security Analyzer (download here).
“This, in case you weren’t aware, is a handy free tool for checking for vulnerabilities on systems, and has the particular advantage (unlike Windows Update) of allowing you to download the patches and install them on multiple machines, rather than just the one.”
Only for Windows 2003 server, 2000 and XP.