Tuesday, November 29, 2011

Comparing the Group Policy by Security Compliance Manager v2

One of the features in Security Compliance Manager is GPO comparison. I think it is good for Administrators to verify the different between 2 GPOs.


OS: Windows 7, Windows Server 2008 or Windows Server 2008 R2
Application: Microsoft .Net Framework 4

In this lab, I will install SCM in a Windows 7 computer.

Install Security Compliance Manager (SCM)
1. At a computer, log in as Domain Administrator.
2. Double-click "Security_Compliance_Manager_Setup".
3. At welcome screen, click "Next".
4. Select "I accept the terms of the license agreement", click "Next" twice.
5. Select "Download and install".

6. Click "Next".
7. Select "I accept the terms of the license agreement", click "Next".
8. Click "Install".

9. Click "Finish".
10. Microsoft Security Compliance Manager will start automatically and download the latest Security Compliance.

Comparing Group Policy Objects
Using Group Policy Management Console back up the Group Policy Objects to a folder

1. At "Microsoft Security Compliance Manager", next to "Import" session, click "GPO Backup (folder)".
2. Select a folder which contains the Group Policy, click "OK".
3. Enter the name for the GPO, click "OK".

The GPOs named GPO 1 and GPO 2 in my lab.

4. The GPO was imported successfully.
5. Import 1 more GPO from the backup.

6. Select "GPO 1".
7. Next to "Baseline" session.

8. Click "Compare / Merge".
9. Select "GPO 2", click "OK".

The result of comparing 2 GPOs was generated. You can also click "Export to Excel" to save as a Excel file.

Download link
Microsoft Security Compliance Manager


This posting is provided “AS IS” with no warranties, and confers no rights!

1 comment:

  1. Security is most important part in computer. You share such nice information about security compliance manager.