Comparing the Group Policy by Security Compliance Manager v2

One of the features in Security Compliance Manager is GPO comparison. I think it is good for Administrators to verify the different between 2 GPOs.

Prerequisites

OS: Windows 7, Windows Server 2008 or Windows Server 2008 R2

Application: Microsoft .Net Framework 4

In this lab, I will install SCM in a Windows 7 computer.

Install Security Compliance Manager (SCM)

1. At a computer, log in as Domain Administrator.

2. Double-click "Security_Compliance_Manager_Setup".

3. At welcome screen, click "Next".

4. Select "I accept the terms of the license agreement", click "Next" twice.

5. Select "Download and install".

6. Click "Next".

7. Select "I accept the terms of the license agreement", click "Next".

8. Click "Install".

9. Click "Finish".

10. Microsoft Security Compliance Manager will start automatically and download the latest Security Compliance.

Comparing Group Policy Objects

Prerequisites

Using Group Policy Management Console back up the Group Policy Objects to a folder

1. At "Microsoft Security Compliance Manager", next to "Import" session, click "GPO Backup (folder)".

2. Select a folder which contains the Group Policy, click "OK".

3. Enter the name for the GPO, click "OK".

The GPOs named GPO 1 and GPO 2 in my lab.

4. The GPO was imported successfully.

5. Import 1 more GPO from the backup.

6. Select "GPO 1".

7. Next to "Baseline" session.

8. Click "Compare / Merge".

9. Select "GPO 2", click "OK".

The result of comparing 2 GPOs was generated. You can also click "Export to Excel" to save as a Excel file.

Download link

Microsoft Security Compliance Manager

http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=16776

Reference

http://technet.microsoft.com/en-us/library/cc677002.aspx

This posting is provided “AS IS” with no warranties, and confers no rights!