Security Compliance Management Toolkit Series
Monitor the Security Compliance of Your IT Environment for Computers Running Windows
The Security Compliance Management Toolkit Series builds on previous Solution Accelerators to provide you with expanded best practices and additional automation tools to help configure and deploy security settings for the following operating systems and applications: Windows® 7, BitLocker™ Drive Encryption, Windows® Internet Explorer® 8, Windows Server® 2008, Windows Server® 2003 Service Pack 2 (SP2), Windows Vista® SP1, Windows XP® Professional SP3, and 2007 Microsoft Office SP1.
After deploying the security settings, you can verify the accuracy of the setting policies and monitor policy changes by using the desired configuration management (DCM) feature of Microsoft System Center Configuration Manager 2007 R2.
This series includes Security Compliance Management Toolkits for the following products:
- Windows 7
- Internet Explorer 8
- Windows Server 2008
- Windows Server 2003
- Windows Vista
- Windows XP
- 2007 Microsoft Office
Note:
The GPOAccelerator tool is included with each toolkit download package.
Toolkit Components
Each of the Security Compliance Management Toolkits includes the following components:
- Security guide. Each toolkit includes an updated version of a previously released security guides for Windows 7, Windows Vista, Windows XP, Windows Server 2008, Windows Server 2003, Internet Explorer 8 or 2007 Microsoft Office. The guidance provides you with best practices and automated tools to help you plan and deploy your security baselines.
- Attack Surface Reference workbook. A resource that lists the changes introduced as server roles are installed on computers running Windows Server 2003 and Windows Server 2008, for the toolkits specific to these operating systems.
- Security Baseline Settings workbook. A resource that lists all of the prescribed settings for each of the preconfigured security baselines that the security guides recommend.
- Security Baseline XML. XML files that allow your organization to consume the data defined in the security baseline settings workbooks.
- GPOAccelerator tool. A tool that you can use to create all the Group Policy objects (GPOs) you need to deploy your chosen security configuration. This release also supports Windows Server 2003, and creating security configurations on machines not joined to a domain.
- INF Files. INF files for Windows 7, Windows XP, Windows Vista, Windows Server 2003, Windows Server 2008.
- Baseline Compliance Management Overview. The overview discusses best practices on how to monitor security baselines for Windows operating systems and Office applications.
- DCM Configuration Pack User Guide. A step-by-step prescriptive user guide about how to use the Configurations Packs with the DCM feature in Configuration Manager 2007 R2.
- DCM Configuration Packs. The toolkit series includes DCM configuration packs to use with the DCM feature in Configuration Manager 2007 R2.
Please direct questions and comments related to the DCM feature and the Configuration Packs to the Configuration Manager – Desired Configuration Management community forum on Microsoft TechNet.
Send questions or feedback to us directly at secwish@microsoft.com
Additional Information
Solution Accelerators are free, scenario-based guides and automations designed to help IT Professionals who are proactively planning, deploying, and operating IT systems using Microsoft products and technologies. Solution Accelerator scenarios focus on security and compliance, management and infrastructure, and communication and collaboration.
Get the Solution Accelerator Notifications Newsletter
Subscribe to the Solution Accelerator Notifications newsletter so that you can stay informed about new Solution Accelerator releases and updates. The newsletter covers such areas of interest as
- Communication & Collaboration
- Security, Data Protection, & Recovery
- Deployment
- Operations & Management
You may also receive invitations to participate in accelerator development via beta programs and customer surveys. Solution Accelerator Notifications is currently available in English only.
If you’ve used a Solution Accelerator within your organization, please share your experience with us by completing this short survey (less than ten minutes long).
Comments
Anonymous
January 01, 2003
The GPOAccelerator is no longer available. It has been replaced with Microsoft Security Compliance Manager and the Local Policy Tool, see social.technet.microsoft.com/.../what-happened-to-the-gpo-accelerator.aspx for more details. You can download SCM at technet.microsoft.com/.../cc677002.aspx. If you have more questions feel free to contact me directly our our team's address, secwish@microsoft.com.Anonymous
November 19, 2009
Hi Aviraj, I wanted to enquire if there is an availability of exchange 2007 admin pack for Windows 7. (The current exchange Admin Pack has some bugs when used on Win 7)