Take a look at Microsoft Baseline Security Analyzer. It's a tool that does this -

Abstract

The Microsoft® Baseline Security Analyzer (MBSA) is a tool that allows an individual home or corporate user or an administrator to scan one or more Windows®-based computers for common security misconfigurations. The MBSA will scan a Windows-based computer and check the operating system and other installed components, such as Windows 2000 Server's Internet Information Services (IIS) and SQL Server™, for security misconfigurations and whether or not they are up-to-date with respect to recommended security hotfixes and patches.
More you can find here and here .


Hope this can help some of you...