windows SCW Security Config Wizard 1

[blade10]

All-

Has anyone here use this security tool on 2003 against a "template file"..

I'm wondering when you build a server to a certain security specification how can you create this supposed template file that it compares criteria against to make sure the server is "built" according to corporate policy.

Can anyone elaborate on this structure a bit, and maybe provide a link site so I can further read into this topic in which I've heard so much but never actually implemented.

thanks
blade

 

[58sniper]

I use it all the time. I wrote a series on using it for Exchange servers, but the premise is the same:

http://www.petri.co.il/scw-for-exchange-server-2007-part-1.htm

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[blade10]

Thanks Pat!

I appreciate it highly! The man writes for the Petri Knowledge base on top of that AWESOME!

I read so much useful info on that forum site!

Blade

 

[58sniper]

The one caveat is making sure you've installed everything, configured everything, and updated everything before you create the template and apply it to the server. Otherwise you spend a ton of time trying to tweak and troubleshoot.

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[blade10]

Hey Pat!

Hope all is well. Just curious but is there an automated approach to running the template against a new server that needs "auditing" or even an existing pre built server that may need to be currently assessed against the baseline setup?

Is there a "canned" GPO that can kick off the baseline once a new server is placed into an OU for the first time?

just curious how I can automate this somewhat.. I do like your article on SCW for Exchange. I am using it this past week, and has come in handy!

thx
blade

 

[blade10]

All-


I just found a cool article that somewhat answers my question above, from WinITPros!

Have fun!

http://windowsitpro.com/article/art...-deploy-an-scw-developed-security-policy.html

I plan to implement a test phase this week using this url's direction.

blade