Microsoft Updates Security Compliance Manager Tool

Microsoft issued an update Friday to its Security Compliance Manager tool, which helps IT pros set security policies for some Microsoft software.

The update improves over the initial release in April by including documentation and guidance materials within the tool, according to a Microsoft TechNet library article. Security Compliance Manager is a free Microsoft "solution accelerator" that works with Microsoft's System Center Configuration Manager 2007 management product. It's considered to be "the next evolution of the Microsoft Security Compliance Management Toolkit" series, the article explained.

IT pros can use the tool to download recommended security baseline configuration settings for a number of key Microsoft products, including Windows XP, Vista, Windows 7, Windows Server 2003, Windows Server 2008, Internet Explorer 8, and Office 2007.

The updated Security Compliance Manager can be downloaded here, along with release notes and a "Getting Started Guide" that Microsoft published in June. The tool runs on Windows 7 and Windows Vista Service Pack 2.

To customize security settings, IT pros can make copies of the baseline files and then modify the baseline settings. These customized settings can then be exported across the computing environment via Group Policy.

The tool offers a number of export formats, such as Excel, Group Policy objects, desired configuration management (DCM) packs or the Security Content Automation Protocol, according to TechNet. However, Microsoft's "Getting Started Guide" recommended the DCM format, which works with System Center Configuration Manager to help monitor the security baselines.

"The desired configuration management (DCM) feature of System Center Configuration Manager 2007 monitors server or client computers against a single or multiple security baselines," the Guide stated. "To take advantage of this scanning feature, use the Security Compliance Manager to produce DCM configuration packs based on your security baselines."

In addition to enabling custom security settings, the tool can be used to check how closely an organization's existing security settings match up with Microsoft's best-practice recommendations.

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

  • cloud icon with a padlock overlay set against a digital background featuring binary code and network nodes

    Cloud Security Auditing Tool Uses AI to Validate Providers' Security Assessments

    The Cloud Security Alliance has unveiled a new artificial intelligence-powered system that automates the validation of cloud service providers' (CSPs) security assessments, aiming to improve transparency and trust across the cloud computing landscape.

  • stack of gold coins disintegrates into digital particles against a dark circuit-board background with glowing AI imagery

    Report: Most Organizations See No Business Return on Gen AI Investments

    Despite $30-40 billion in enterprise spending on generative AI, 95% of organizations are seeing no business return, according to a recent report out of the MIT Media Lab.

  • stylized illustration of a desktop, laptop, tablet, and smartphone all displaying an orange AI icon

    Survey: AI Shifting from Cloud to PCs

    A recent Intel-commissioned report identifies a significant shift in AI adoption, moving away from the cloud and closer to the user. Businesses are increasingly turning to the specialized hardware of AI PCs, the survey found, recognizing their potential not just for productivity gains, but for revolutionizing IT efficiency, fortifying data security, and delivering a compelling return on investment by bringing AI capabilities directly to the edge.

  • student holding a smartphone with thumbs-up and thumbs-down icons, surrounded by abstract digital media symbols and interface elements

    Teaching Media Literacy? Start by Teaching Decision-Making

    Decision-making is a skill that must be developed — not assumed. Students need opportunities to learn the tools and practices of effective decision-making so they can apply what they know in meaningful, real-world contexts.