Applying recommend settings from "microsoft security compliance manager 3.0.60.0" to a standalone Server using LocalGPO.wsf on Server 2012 R2

Hello
Can someone please help me with the following question.
I have a standalone Server and need to apply settings from SCM, I can see how to do this following the instructions in the following article
http://windowsitpro.com/security/q-how-can-i-apply-security-baseline-i-defined-through-microsoft-security-compliance-manager
The problem is the LocalGPO.wsf that ships with the above version of SCM does not run on Server 2012 R2 (only Server 2012)
my question is,
is there a later version of LocalGPO.wsf I can use that works on Server 2012 R2 ?
Thanks
AAnotherUser__
AAnotherUser__

Hi,
Thanks for your post.
SCM Baselines for Windows 8.1, IE 11 and Server 2012 R2 are now live!
http://blogs.technet.com/b/secguide/archive/2014/09/04/scm-baselines-for-windows-8-1-ie-11-and-server-2012-r2-are-now-live.aspx
For more SCM related issue, i think you may ask in:
https://social.technet.microsoft.com/Forums/en-US/home?forum=compliancemanagement
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

Upgrading from SQL Server 2005 Compact Edition [ENU] to SQL Server 2008 Express Edition OR HIGHER for Microsoft Security Compliance Manager

I have downloaded the MS Security Compliance Manager, which is in two parts: MS SQL Server 2008 Express Edition & the SCM. The install instructions state the the server needs to be install before the SCM. So as the install continues I get
an error message, which cancels the installation. So, I am trying to install SQL 2008 EE separate from SCM. My question is:
Can I upgrade from my current SQL Server 2005 Compact Edition [ENU]
directly to SQL Server 2008 Express Edition (or higher)?

So as the install continues I get an error message, which cancels the installation.
And which error message did you got?
SQL Server Compact Edition is something different then SQL Server Express (or Standard) Edition, you can't upgrade it as you asked for,.
Olaf Helper
[ Blog] [ Xing] [ MVP]

Microsoft Security Compliance Manager - Failed to installed

Every time I try to install Microsoft Security Compliance Manager right when I getto the part where I'm installing it, it gives me this error:
Microsoft Security Compliance Manager Setup Wizard failed while starting the installation/uninstallation The given path's format is not supported.
Then closing the installation and telling me it failed.
Please help I need to install this for a class.

Hi,
Thanks for your post.
SCM Baselines for Windows 8.1, IE 11 and Server 2012 R2 are now live!
http://blogs.technet.com/b/secguide/archive/2014/09/04/scm-baselines-for-windows-8-1-ie-11-and-server-2012-r2-are-now-live.aspx
For more SCM related issue, i think you may ask in:
https://social.technet.microsoft.com/Forums/en-US/home?forum=compliancemanagement
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Microsoft Security Compliance Manager V3 and create GPO

I have created a GPO backup from the compliance manager for Windows 7 SP1. I am trying to find documentation for the exact process of importing these settings into a newly created "blank" gpo. In review of the Backup.xml file, I can see that
it references Contoso.com (the generic MS domain for examples, etc). Is there a clear documented process for configuring the template then creating a domain GPO? Any help is greatly appreciated!
wjk

Hi,
Thanks for your post.
SCM Baselines for Windows 8.1, IE 11 and Server 2012 R2 are now live!
http://blogs.technet.com/b/secguide/archive/2014/09/04/scm-baselines-for-windows-8-1-ie-11-and-server-2012-r2-are-now-live.aspx
For more SCM related issue, i think you may ask in:
https://social.technet.microsoft.com/Forums/en-US/home?forum=compliancemanagement
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Microsoft security compliance manager 3.0 in windows 2012 server

Hi All,
I am completely new in SCM. I have assigned to verify and check why SCM is required for environment, what and how SCM works. I have downloaded SCM from
https://www.microsoft.com/en-us/download/details.aspx?id=16776.
After download i am able to install it in 2008 std x64 bit but my target is to install it in 2012 server x64 bit. I am not able to install it.
It's showing do not have feature of .Net Framework 3.5 and installation is getting closed suddenly. I tried to download .Net Framework3.5 but not able to install it as showing not supported or showing alternet path. I am not holding any CD/DVD of Windows
2012 server. Only ISO.
Please help me.
Thanking you in advance!
Abhijit

Hi,
Thanks for your post.
SCM Baselines for Windows 8.1, IE 11 and Server 2012 R2 are now live!
http://blogs.technet.com/b/secguide/archive/2014/09/04/scm-baselines-for-windows-8-1-ie-11-and-server-2012-r2-are-now-live.aspx
For more SCM related issue, i think you may ask in:
https://social.technet.microsoft.com/Forums/en-US/home?forum=compliancemanagement
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Security Compliance Manager - version 3.0.60

Does anyone know if this version of Security Compliance Manager supports Windows Server 2012 R2:
3.0.60

Hi sayerdi,
As this question is related to Security Compliance Manager (SCM), for quick and accurate response, I would like to recommend that you ask the question in the SCM forum at
https://social.technet.microsoft.com/Forums/en-US/home?forum=compliancemanagement . It is appropriate and more experts will assist you.
Additionally, there is a similar thread about SCM for Windows Server 2012 R2 for your reference.
https://social.technet.microsoft.com/Forums/en-US/9a0b831e-5d38-4b26-9191-16286f10ecab/scm-update-for-windows-81-and-windows-2012-r2?forum=compliancemanagement
Thanks,
Lydia Zhang

How to exclude a file/folder from Microsoft Security Essentials scan in Windows 7/Vista/XP?

How to exclude a file/folder from Microsoft Security Essentials scan
in Windows 7/Vista/XP?
Hetti Arachchige V Aravinda | Network & System Administrator (B.Sc, Microsoft Small Business Specialist, MCP, MCTS, MCSA, MCSE,MCITP, CCNA, CEH, MBCS)

Hi,
Thanks for sharing this link.
Nice job!
If you have any feedback on our support, please click
here
Alex Zhao
TechNet Community Support

Upgrade from ADFS 2.1 to ADFS 3.0 and stay on Windows Server 2012 (not R2)

Hello,
could you tell me if this is possible? We need to stay on the same OS 2012 (not R2)?
Are the 2 versions compatible, i.e if we upgrade the secondary to ADFS 3.0 will the primary on ADFS 2.1 still sync to it, and will the farm respond on either host?
Thanks,
Tim

The upgrade procedure is described here: http://blogs.technet.com/b/askpfeplat/archive/2014/03/31/how-to-build-your-adfs-lab-part4-upgrading-to-server-2012-r2.aspx
More if you ask them in this forum: https://social.msdn.microsoft.com/Forums/vstudio/en-US/home?forum=Geneva
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Telephone solicitation from "Microsoft security contractors"I

Frequently receive phone calls from those claiming to be Microsoft contractors. They say "you're having problems with your computer." I ask how they know.
Please clarify whether there really are "Microsoft Contractors" who make unsolicited phone calls to Windows users.

Microsoft and Microsoft contractors never make unsolicited phone calls to consumers. In fact, they never send unsolicited email messages. This is a scam to either steal your identity or install malicious software on your computer.
Some relevant links:
http://www.microsoft.com/security/online-privacy/avoid-phone-scams.aspx
http://answers.microsoft.com/en-us/windows/forum/windows_vista-security/scam-telephone-calls-from-people-claiming-to-be/00a5fdb4-4242-4083-9f5e-405587b29bd2
Richard Mueller - MVP Directory Services

Security Compliance Manager not compatible with Windows 8.1

Hey everyone, can someone point me in the right direction here. I am running the GPOMSI.MSI app in the SCM 3.0 When I try to do an export of Local Group Policies I get an error message stating its not compatible. I have searched for an
update, but cant find it anywhere.
Thanks

Hi,
According to the screenshot, it seems like compatibility problem, What's the type of your system?
In addition, you can refer to the link below to view its compatibility list.
http://gallery.technet.microsoft.com/LocalGPOmsi-Excellent-MS-2593b2eb
Roger Lu
TechNet Community Support

How to efficently apply development settings from DNG to RAW?

Hi,
two years ago, after switching to only shoot RAW, I let LR convert my RAWs to DNG on import (app. 1.000 pictures), but later stopped that again due to the slow process and continued to work on my original RAWs only. Now I'm left with 1.000 developed DNGs and 10.000 RAWS.
What would be the most efficiant way to transfer the development setting of my DNGs to the correspinding RAWs?
Best,
Max

Hi Max
The only way I can think of is manual process e.g. import the raw files then select the DNG and corresponding raw and synchronize settings.
If batches of the DNG’s have shared develop settings you might be able to speed up the process by choosing a representative DNG and then synchronizing a whole bunch of raw files.

How to copy the International settings from current user to default user/welcome screen on Windows 8.1/ Server 2012R2 via PS script?

Hi,
I have to script the international settings in virtual machines which are Win Server 2012R2 or Win 8/8.1.
For the current user, it's quite easy.
new-WinUserLanguageList nl-BE
set-WinUserLanguageList nl-BE
Set-WinSystemLocale nl-BE
set-Culture nl-BE
But how can I copy these settings to the Default user/Welcome screen? I cannot find a solution for that. Even on the site of Microsoft,
http://technet.microsoft.com/en-us/library/hh852115.aspx all CMDlets are only for the current user.
Maybe I'm looking with the wrong keywords, but... With Powershell v4 it should be possible, isn't it?
Thanks for looking together and hopefully we can find an answer.
Kind reg,
Dirk

Questions like this would best be answered in the deployment forum.
The default lock screen tracks the current user. The system lock screen tracks the local system admin account.
There is a SYSTEM profile which, I believe, can be set via registry.
http://social.technet.microsoft.com/Forums/windows/en-US/20d36ce4-c948-4c68-a415-dda9e0665159/setting-default-ui-in-windows-8-or-81-using-dism-online-setuilangenus-gives-error?forum=w8itproinstall
¯\_(ツ)_/¯

Work Manager 6.0 for SMP 2.3 - standalone server - Startup Exceptions

Hello Experts.
I am installing a standalone Agentry Server for Work Manager 6.0 on the server where we have installed SMP 2.3.
It has been installed successfully and does start up, however I get some annoying error messages during start up.
It seems that the server is running - I can succesfully synchronize to an ATE client.
Due to the results from this thread, I have changed all ports in the Agentry.ini file to separate ports numbered 7521, 7522, 7523 and 7524.
Port issues - SMP and Agentry
Errors from the startup.log:
13:26:00 05/05/2014: HTTP-XML Back End Back End: Started
13:26:00 05/05/2014: Server: Starting threads.
13:26:00 05/05/2014: 1 initial threads. Threads will auto-scale.
13:26:00 05/05/2014: Event: 20, 4, Server v6.1.0.3
13:26:00 05/05/2014: Starting front ends
13:26:00 05/05/2014: ANGEL Front End: Starting threads.
13:26:00 05/05/2014: Exception: 13:26:00 05/05/2014 : 2 (Socket Error), UNKNOWN (UNKNOWN, ), ..\Socket\win32\sockets.cpp#1514:ListeningStreamSocket::OSListeningSocket::listenOn
13:26:00 05/05/2014: 3 initial threads. Threads will auto-scale.
13:26:00 05/05/2014: ANGEL Front End: opening listen socket on port 7523
13:26:00 05/05/2014: Exception: 13:26:00 05/05/2014 : 2 (Socket Error), UNKNOWN (UNKNOWN, ), ..\Socket\win32\sockets.cpp#1514:ListeningStreamSocket::OSListeningSocket::listenOn
13:26:00 05/05/2014: Event: 17, 10, 0.0.0.0:7523 open
13:26:00 05/05/2014: Event: 17, 10, ANGEL Front End v6.1.0.3
13:26:00 05/05/2014: Exception: 13:26:00 05/05/2014 : 2 (Socket Error), UNKNOWN (UNKNOWN, ), ..\Socket\win32\sockets.cpp#1514:ListeningStreamSocket::OSListeningSocket::listenOn
13:26:00 05/05/2014: Event: 0, 0, Old log files moved into Logs-Rolled\2014-05-05-132546
13:26:00 05/05/2014: Event: 0, 23, 4
13:26:00 05/05/2014: Exception: 13:26:00 05/05/2014 : 2 (Socket Error), UNKNOWN (UNKNOWN, ), ..\Socket\win32\sockets.cpp#1514:ListeningStreamSocket::OSListeningSocket::listenOn
13:26:01 05/05/2014: Event: 0, 2, Server startup is complete.
13:26:01 05/05/2014: Agentry Application startup complete
Can anybody help with the meaning and implications of these errors ?
Thank you.
Søren Hansen.

Damn... I missed one port
You are correct. The default port (8282) of Agentry is used multiple places in the Agentry.ini file, and collides with SMP.
Thanks Steve.
For others:
Please make sure the following ports of the Agentry.ini file are unique across all applications on the server. In this case I have chosen to call all my ports on this instance 752X.
Now the server starts without errors.
[ANGEL Front End Ports]
1=7523
[TCP Front End]
listenOn=7521
[Java-1]
nonStandardJavaOptions=-Xdebug -Xrunjdwp:transport=dt_socket,address=7524,server=y,suspend=n
[HTTPXML-2]
baseURL=http://localhost:7522
listenOn=7525
Søren Hansen.

Policies missing in SCM Windows 8.1 Security Compliance Baseline v1.0

Hello,
I have installed SCM 3.0.60 (downloaded from this link:
Microsoft Security Compliance Manager) on a Windows 8.1 Virtual Machine. Because I could not connect my VM to internet at the moment, I imported the Windows 8.1 Security Compliance Baseline (downloaded from this link
SCM Baselines for Windows 8.1, IE 11 and Server 2012 R2 are now live!) and the baseline attachment in SCM. The import process ran well and I then created a custom baseline based on the Win8.1 Computer Security Compliance 1.0 baseline (using the Duplicate
action in SCM). During my customization I have noticed that some policies were missing from my custom baseline. After verifying the original baseline I have noticed that the policies were missing in it also. I connected my VM to the internet and clicked on
the Download Microsoft baselines automatically action in SCM. SCM downloaded additional baselines (Office 2013, SQL Server 2012,...). I was expecting the Win8.1 baseline to be updated but it was not. The policies are still missing and I cannot complete my
customization. For information the missing policies that I've noticed are the following:
Under Computer Configuration\Administrative Templates\Windows Components\File Explorer
All policies are missing except "Configure Windows SmartScreen" and "Turn off Data Execution Prevention for Explorer"
Under Computer Configuration\Administrative Templates\Windows Components\Sync
your settings theses polices are missing:
--> Do not sync
--> Do not sync app settings
--> Do not sync browser settings
--> Do not sync desktop personalization
--> Do not sync on metered connections
--> Do not sync other Windows Settings
--> Do not sync passwords
--> Do not sync personalize
Under Computer Configuration\Administrative Templates\System\KDC these policies are missing
--> KDC support for claims, compound authentication and Kerberos armoring
--> User forest search order
--> Warning for large Kerberos tickets
--> Provide information about previous logons to client computer
It seems that theses policies are not present in the Package.XML file that is included in the Windows-8.1-Security-Compliance-Baseline.cab.
Does anyone ever experience the same issue?
Anyone know if there is an updated version of the Windows 8.1 Security Compliance Baseline ? (the version downloaded from the link i supplied above is v1.0)
Regards,
François

Hi,
in this blog, it is just related to Internet Explorer, not the lock screen camera, it can be found at the GPO.
Regards
Wade Liu
TechNet Community Support

Using LocalGPO, applying SCM Member Server Baseline Policy for 2008R2

Hi,
I am working with LocalGPO and need to apply SCM Policies meant for Member Servers to Workgroup machines. I know not ideal situation but the client wants to create templates for the machines and want them to be hardened up even before they join the Domain.
I tried exporting the Baseline for 2008R2 and then implemented the same on a WorkGroup 2008R2 machine. But the changes does not seems to be applying.
Any suggestions on how to do it in a better way?

Hi,
>>I tried exporting the Baseline for 2008R2 and then implemented the same on a WorkGroup 2008R2 machine. But the changes does not seems to be applying.
How did we specifically use the LocalGPO command line to do this? Did we run the LocalGPO command line as an administrator?
Regarding how to use LocalGPO tool to import security baseline settings, the following articles can be referred to for more information.
Microsoft Security Compliance Manager: Security Settings Simplified
http://technet.microsoft.com/en-us/magazine/hh489604.aspx
Q: How can I apply a security baseline that I defined through Microsoft Security Compliance Manager to a non-domain-joined Windows machine?
http://windowsitpro.com/security/q-how-can-i-apply-security-baseline-i-defined-through-microsoft-security-compliance-manager
Please Note: Since the above website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Best regards
Frank Shen

Applying recommend settings from "microsoft security compliance manager 3.0.60.0" to a standalone Server using LocalGPO.wsf on Server 2012 R2

Similar Messages

Maybe you are looking for