deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-19 04:13:41 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Further edits to Windows Security Baselines topic.

Browse Source
This commit is contained in:
Your Name
2017-10-12 23:46:35 -07:00
parent 71cf96d565
commit 5935d9bc18
1 changed files with 7 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
windows/device-security/windows-10/windows-security-baselines.md
View File

@ -1,13 +1,13 @@
--- ---
title: Microsoft Security Baselines title: Microsoft Security Baselines
description: This article, and the articles it links to, describe how to use Microsoft Security Baselines in your organization description: This article, and the articles it links to, describe how to use Microsoft Security Baselines in your organization
keywords: virtualization, security, malware keywords: virtualization, security, malware
ms.prod: w10 ms.prod: w10
ms.mktglfcycl: deploy ms.mktglfcycl: deploy
ms.localizationpriority: high ms.localizationpriority: high
author: sagaudre author: sagaudre
--- ---
# Microsoft Security Baselines # Microsoft Security Baselines
**Applies to:** **Applies to:**
@ -48,20 +48,16 @@ You can use security baselines to:
You can get the security baselines using the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=55319). This download page is for the Security Compliance Toolkit which comprises tools that can assist an admin with managing the baselines in addition to the actual security baselines. You can get the security baselines using the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=55319). This download page is for the Security Compliance Toolkit which comprises tools that can assist an admin with managing the baselines in addition to the actual security baselines.
<br />
![Security Compliance Toolkit](images/security-compliance-toolkit.png)
<br />
## Microsoft Security Compliance Toolkit 1.0 ## Microsoft Security Compliance Toolkit 1.0
#### What is the Security Compliance Toolkit (SCT)? ### What is the Security Compliance Toolkit (SCT)?**
The Security Compliance Toolkit is a set of tools that allows enterprise security administrators to download, analyze, test, edit and store Microsoft-recommended security configuration baselines for Windows and other Microsoft products. The Security Compliance Toolkit is a set of tools that allows enterprise security administrators to download, analyze, test, edit and store Microsoft-recommended security configuration baselines for Windows and other Microsoft products.
It enables the administrators to effectively manage their enterprise’s Group Policy Objects (GPOs). Using the toolkit, administrators can compare their current GPOs with Microsoft-recommended GPO baselines or other baselines, edit them, store them in GPO backup file format, and apply them broadly through Active Directory or individually through local policy.<p></p> It enables the administrators to effectively manage their enterprise’s Group Policy Objects (GPOs). Using the toolkit, administrators can compare their current GPOs with Microsoft-recommended GPO baselines or other baselines, edit them, store them in GPO backup file format, and apply them broadly through Active Directory or individually through local policy.<p></p>
![Security Compliance Toolkit](images/security-compliance-toolkit.png)
The Security Compliance Toolkit consists of: The Security Compliance Toolkit consists of:
- Windows 10 Security Baselines - Windows 10 Security Baselines
@ -81,7 +77,7 @@ The Security Compliance Toolkit consists of:
Using the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=55319), you can download the tools along with the baselines for the relevant Windows versions. Using the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=55319), you can download the tools along with the baselines for the relevant Windows versions.
## What is the Policy Analyzer tool? ### What is the Policy Analyzer tool?
The Policy Analyzer is a utility for analyzing and comparing sets of Group Policy Objects (GPOs). Its main features are: The Policy Analyzer is a utility for analyzing and comparing sets of Group Policy Objects (GPOs). Its main features are:
- Highlight when a set of Group Policies has redundant settings or internal inconsistencies; - Highlight when a set of Group Policies has redundant settings or internal inconsistencies;
@ -93,13 +89,11 @@ Policy Analyzer lets you treat a set of GPOs as a single unit. This makes it eas
More information on the Policy Analyzer tool can be found on the [Security Guidance blog](https://blogs.technet.microsoft.com/secguide/2016/01/22/new-tool-policy-analyzer/) or by [downloading the tool](https://www.microsoft.com/download/details.aspx?id=55319). More information on the Policy Analyzer tool can be found on the [Security Guidance blog](https://blogs.technet.microsoft.com/secguide/2016/01/22/new-tool-policy-analyzer/) or by [downloading the tool](https://www.microsoft.com/download/details.aspx?id=55319).
## What is the Local Group Policy Object (LGPO) tool? ### What is the Local Group Policy Object (LGPO) tool?
LGPO is a tool for transferring Group Policy directly between a host’s registry and a GPO backup file, bypassing the Domain Controller. This gives administrators a simple way to verify the effects of their Group Policy settings directly. LGPO is a tool for transferring Group Policy directly between a host’s registry and a GPO backup file, bypassing the Domain Controller. This gives administrators a simple way to verify the effects of their Group Policy settings directly.
Documentation for the LGPO tool can be found on the [Security Guidance blog](https://blogs.technet.microsoft.com/secguide/2016/01/21/lgpo-exe-local-group-policy-object-utility-v1-0/) or by [downloading the tool](https://www.microsoft.com/download/details.aspx?id=55319). Documentation for the LGPO tool can be found on the [Security Guidance blog](https://blogs.technet.microsoft.com/secguide/2016/01/21/lgpo-exe-local-group-policy-object-utility-v1-0/) or by [downloading the tool](https://www.microsoft.com/download/details.aspx?id=55319).
<br />
## Version Matrix ## Version Matrix
**Client Versions** **Client Versions**
@ -147,8 +141,6 @@ Internet Explorer 11 | [SecGuide](https://blogs.technet.microsoft.com/secguide/2
> [!NOTE] > [!NOTE]
> Browser baselines are built-in to new OS versions starting with Windows 10 > Browser baselines are built-in to new OS versions starting with Windows 10
<br />
## Frequently asked questions (FAQ) ## Frequently asked questions (FAQ)
**What is the Microsoft Security Compliance Manager (SCM)?** **What is the Microsoft Security Compliance Manager (SCM)?**
@ -205,7 +197,7 @@ No. SCM only supported SCAP 1.0, which was not updated as SCAP evolved. The new
![Community](images/community.png) ![Community](images/community.png)
<br />
## See Also ## See Also