Windows IT Pro is the leading independent community for IT professionals deploying Microsoft Windows server and client applications and technologies.
  
  
  Advanced Search 


Return to article

Using Group Policy to Deploy an SCW-Developed Security Policy
 

How can I use Group Policy to deploy a Security Configuration Wizard (SCW)?developed security policy to many servers?

SCW security policies are XML files that define settings for several different areas of Windows configuration. Group Policy doesn't support some of these areas (e.g., Microsoft IIS), therefore you can't simply open a Group Policy Object (GPO) and specify an SCW security policy. For example, because there's no Group Policy extension for IIS, Group Policy can't configure IIS settings that are defined in an SCW security policy. However, SCW allows you to convert the sections of an SCW security policy that Group Policy does support to a GPO template. To do so, create an SCW security policy, then use the SCW command-line tool (scwcmd.exe) and its "transform" function to create a GPO and configure the Security Settings, IP Security Policy, and Windows Firewall sections of the GPO according to the specified SCW security policy. For example, the command

scwcmd transform /p:c:\MySCWPolicy 
  .xml /g:MyNewGPO

transforms a SCW security policy called MySCWPolicy.xml to a GPO named MyNewGPO. Then you link the GPO to an organizational unit (OU) that targets the desired servers. You must be a member of a privileged group (i.e., Domain Admins or Enterprise Admins) or have the delegated ability to create GPOs. You can find more information about SCW in " Windows 2003 SP1 Security Configuration Wizard," InstantDoc ID 45550.

 

 







Windows IT Pro Home Register FAQ for Windows WinInfo News
Europe Edition About Us Contact Us/Customer Service Media Kit Affiliates / Licensing  
SQL Server Magazine Office & SharePoint Pro DevProConnections IT Job Hound
Left-Brain.com Technology Resource Directory asp.netPRO ITTV Windows SuperSite 
 
 Windows IT Pro is a Division of Penton Media Inc.
 © 2009 Penton Media, Inc. Terms of Use | Privacy Statement