Archive for October, 2009

scwcmd: convert Security Configuration Wizard templates into Group Policies

scwcmd: convert Security Configuration Wizard templates into Group Policies

The Security Configuration Wizard is used to create security templates as XML documents. The SCWCMD command converts one into a group policy (GPO). I do this on Microsoft Windows Server 2008 but it is also available on Microsoft Windows Server 2003. Usually, you would use this on a domain controller or in an active directory environment.

server configuration wizard

server configuration wizard

This video shows how to use the Security Configuration Wizard to create, edit, install, or rollback a security template. It’s available on Server 2008 and Server 2003 if you have service pack one. You can use this as a method of creating Microsoft recommended security settings on your server or Windows client operating system. It’s pretty good for the novice and expert alike as it is a nice GUI click-through. I am doing this on a domain controller, but it is also available on a workgroup server. You can also use this to build templates for Windows 2000, XP, Vista, or 7. Later, you can also use this template to apply these settings to a GPO (Group policy object).

security template and analysis

security template and analysis

The Security Template and Analysis Snap-in (MMC) allows you to compare a security template and the current computer’s security policy. It will make a database to show the difference and then allow you to decide if you want to import the settings from the template into the current local settings. It shows an X where the template conflicts with the local policy. I perform this on Server 2008, but it is available on Server 2000, 2003, Microsoft Windows XP, Vista, and 7.