SQL 2012 Baseline PowerShell Helper for Compliance Scanning doesn't seem to work
Hi, I can't get the PowerShell helper to work. I've used SCM 3.0 to import the beta SQL2012 security baseline. Did a few changes, then exported it to an SCM .cab file. I've copied this cab file to a...
View Articleauditpol.exe csv syntax
I'm looking for a reference on what the syntax is for the CSV file using with auditpol.exe /restore <filename>.Machine Name,Policy Target,Subcategory,Subcategory GUID,Inclusion Setting,Exclusion...
View ArticleClik here to view.
Disagreement within same configuration
Microsoft Security Compliance Manager 3.0.60.0 > WS2008R2SP1 Member Server Security Compliance 1.1 Baseline > "Microsoft Network Client: Digitally Sign Communications (Always)"The Microsoft...
View ArticleHow to view report from SQL 2012 Baseline PowerShell Helper
Hi, I've successfully used the PowerShell script Get-ComplianceReport to create a compliance report in XML format. How do I view this XML file. Is there a viewer for this XML format? Or a stylesheet to...
View ArticleCustomizing SCM 3.0 SQL 2012 Baseline
The SQL 2012 baseline consists of PowerShell snippets that perform the checks. I have copied the SQL2012 beta baselines and am trying to customize them.When trying to modify a setting, you can only...
View ArticleHow to automatically apply SQL Server 2012 settings
For Windows operating systems it is possible to create a customized baseline with preferred security settings and export this as a group policy. This group policy can then be applied to systems.For SQL...
View ArticleAutomating the deployment of baseline policies
Hi,I have deployed SCM 3.0 on my Server 2012 environment. In addition, I am in the process of deploying SCCM 2012.What are my options for automating the deployment of baselines to the rest of my...
View ArticleClik here to view.
Microsoft Security Compliance Manager terms
Hi Everybody,Recently i have installed Microsoft Security Compliance Manager. But i am confused with some terms. As per the print-screen ( which is mark in Red-Colour Round ) 1st - the 'Default' here...
View ArticleExport GPO Backup error.
Hi, I've been trying export to GPO backup (folder) baseline but i have error: inclusionSetting .=============================System.ArgumentException ================== inclusionSetting...
View ArticleWS2008R2SP1 Domain Controller Security Compliance Template Issue
I am working on a new Domain Controller Security Policy and just tested in my engineering domain SCM template “Domain Controller Security Compliance 1.1” Few second after I import and link that GPO to...
View ArticleClik here to view.
SCM 3.0.60 vs Windows 8 - localgpo does not run on Windows 8
Hello all,SCM 3.0 has Microsoft Baselines on board for Windows 8 and Windows 2012.Have SCM and localgpo installed on Win8 machine.But when I try to run localgpo, the following error is thrown: "This...
View ArticleClik here to view.
Trouble merging baselines with GPO import
Hello all,is there a way of merging GPO import settings with a custom baseline, built from template baseline in SCM.More specific: importing registry settings from Windows 2008 R2 SP1 that need to be...
View ArticleLogon Policy for user through SCM
Hi , I am using SCM and creating custom settings for workgroup systems. I want that 1 logon script should run on the system when user logs into the system. Generally we can set it by going 'User...
View ArticleSCM export to SCAP - How do you Identify settings that are not associated...
After successfully importing a Windows 7 GPO I need to generate an SCAP file for compliance verification. The imported GPO says it has 236 unique settings. When I export it to SCAP format and then...
View ArticleError when importing GPO into SCM
I have backed up a gpo from our AD DS. When I import it into SCM I receive this error:The output char buffer is too small to contain the decoded characters, encoding 'Unicode (UTF-8)' fallback...
View ArticleAfter uninstalling SCM 3.0, SCM database remains, how can I remove it if SQL...
I have been searching for the answer to this for awhile, I have tried reinstalling SCM 3.0, but it gets stuck when it tries to start the SCM database. I still have the services for SQLServer...
View ArticleHow to Copy a modified SCEREGVL in Server 2008 R2
Does anybody know what the recommended method of copying a modified SCEREGVL file into a Windows 2008 R2 server is?Currently the only method that works for me is to change the owner permissions of the...
View ArticleSCM 3.0 export settings and associate with baseline 'Windows Server 2008 R2'...
Hi all,in SCM 3.0 (but also in SCM 2.5) I don't find anymore a baseline for Windows Server 2008 R2 (RTM - without SP1).If I export SCM settings in a .cab DCM format, I can associate it with Windows...
View ArticleSecurity Baseline for Home Server 2011
I know Home Server 2011 is out the door, so I will not be too shocked if the answer is "no" here. However, I have to ask.I have an install of Home Server 2011, and I would like to "harden" it. I have...
View Article"Interactive Logon: Message text" being truncated due to semicolon
All,I'm using SCM 3.0.60.0 and having an issue with the "Interactive Logon: Message text for users attempting to log on" when creating a Windows 8 baseline - my organization uses semicolons in the text...
View Article