THE OFFICIAL BLOG OF THE SBS DIVA

http://support.microsoft.com/kb/2600333
http://blogs.technet.com/b/sbs/archive/2011/09/29/windows-server-solutions-bpa-updated-september-2011.aspx

Okay gang kick the tires, see if it now finds stuff.

New best practices
After you install this update, the Windows Server Solutions BPA performs the following checks: 
Checks whether the application pool for Remote Web Access uses the default account 
Checks whether the application pool for Remote Web Access uses the default version of the .NET Framework 
Checks whether the application pool for Remote Web Access uses the default Managed Pipeline Mode 
Checks whether the application pool for Remote Web Access uses the default bit version 
Checks whether the built-in Administrators group has the "Log on as a batch job" user right 
Checks whether the Windows Firewall is enabled
Checks whether the DNS host (A) resource record points to the correct IP address 
Checks whether the internal network adapter is configured to register the IP address of the network adapter in DNS 
Checks whether the values of the DNS ForwardingTimeout registry key and the RecursionTimeout registry key are identical 
Checks whether the extension mechanisms for DNS (EDNS) is enabled 
Checks whether the forward DNS zone of your Active Directory domain allows for secure updates 
Checks whether the forward DNS zone allows for secure updates 
Checks whether Internet Explorer Enhanced Security Configuration is enabled for the Administrators group 
Checks whether Internet Explorer Enhanced Security Configuration is enabled for the Users group 
Checks whether the source server is in the Active Directory Sites and Services snap-in
Checks whether the source server is in the SBSComputer organizational unit (OU) 
Checks whether the MaxCacheTTL DNS parameter is not set 
Checks whether a Windows Small Business Server (SBS) Group Policy is missing 
Checks whether there are DNS name server resource records in the forward lookup zone 
Checks whether there are DNS name server records in the _msdcs zone 
Checks whether there are DNS name server records for the delegated _msdcs forward lookup zone. 
Checks whether Windows SBS is the Domain Naming Master (if Windows SBS is the Domain Naming Master, you will receive a confirmation message)
Checks whether Windows SBS is the Infrastructure Master (if Windows SBS is the Infrastructure Master, you will receive a confirmation message)
Checks whether Windows SBS is the Primary Domain Controller Master (if Windows SBS is the Primary Domain Controller Master, you will receive a confirmation message)
Checks whether the Authenticated Users group is a member of the Pre-Windows 2000 Compatible Access group 
Checks whether Windows SBS is the Relative ID (RID) Master (if Windows SBS is the RID Master, you will receive a confirmation message)
Checks whether the DNS client is configured correctly 
Checks whether Windows SBS is the Schema Master (if Windows SBS is the Schema Master, you will receive a confirmation message)
Checks whether the value of the RootVeer registry entry for the .NET Framework is correct 
Checks whether the server cannot ping 
Checks whether the value of the Remote Desktop Protocol (RDP) port is the default value 
Checks whether the value of the SysvolReady registry key is correct 
Checks whether the Sysvol folder is shared 
Checks whether the free disk space is very low 
Checks whether the value of the default Application Pool is changed 
Checks whether the Certification Authority name may cause errors 
Checks whether the value of the OriginalMachineName(90) registry key is correct 
Checks whether the value of the OriginalMachineName(100) registry key is correct 
Checks whether the version of Exchange Server 2010 is the release version 
Checks whether Windows SBS is in a journal wrap condition 
Checks whether the external remote procedure call (RPC) authentication is not set to the default method 
Checks whether the internal RPC authentication is not set to the default method 
Checks whether the version of Windows Server 2008 R2 is the release version 
Checks whether Simple Mail Transfer Protocol (SMTP) is installed 
Checks whether there are empty Servers containers 
Checks whether the accepted domain for Exchange is not the default domain 
Checks whether the application pool for SharePoint uses the default account 
Checks whether the application pool for SharePoint uses the default version of the .NET Framework 
Checks whether the application pool for SharePoint uses the default Managed Pipeline Mode 
Checks whether the application pool for SharePoint uses the default bit version 
Checks whether the application pool for PowerShell uses the default account 
Checks whether the application pool for PowerShell uses the default version of the .NET Framework 
Checks whether the application pool for PowerShell uses the default Managed Pipeline Mode 
Checks whether the application pool for PowerShell uses the default bit version