Further edits to Windows Security Baselines topic.

This commit is contained in:
Your Name
2017-10-12 23:46:35 -07:00
parent 71cf96d565
commit 5935d9bc18

View File

@ -1,13 +1,13 @@
---
title: Microsoft Security Baselines
description: This article, and the articles it links to, describe how to use Microsoft Security Baselines in your organization
keywords: virtualization, security, malware
ms.prod: w10
ms.mktglfcycl: deploy
ms.localizationpriority: high
author: sagaudre
---
# Microsoft Security Baselines
**Applies to:**
@ -48,20 +48,16 @@ You can use security baselines to:
You can get the security baselines using the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=55319). This download page is for the Security Compliance Toolkit which comprises tools that can assist an admin with managing the baselines in addition to the actual security baselines.
<br />
![Security Compliance Toolkit](images/security-compliance-toolkit.png)
<br />
## Microsoft Security Compliance Toolkit 1.0
#### What is the Security Compliance Toolkit (SCT)?
### What is the Security Compliance Toolkit (SCT)?**
The Security Compliance Toolkit is a set of tools that allows enterprise security administrators to download, analyze, test, edit and store Microsoft-recommended security configuration baselines for Windows and other Microsoft products.
It enables the administrators to effectively manage their enterprises Group Policy Objects (GPOs). Using the toolkit, administrators can compare their current GPOs with Microsoft-recommended GPO baselines or other baselines, edit them, store them in GPO backup file format, and apply them broadly through Active Directory or individually through local policy.<p></p>
![Security Compliance Toolkit](images/security-compliance-toolkit.png)
The Security Compliance Toolkit consists of:
- Windows 10 Security Baselines
@ -81,7 +77,7 @@ The Security Compliance Toolkit consists of:
Using the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=55319), you can download the tools along with the baselines for the relevant Windows versions.
## What is the Policy Analyzer tool?
### What is the Policy Analyzer tool?
The Policy Analyzer is a utility for analyzing and comparing sets of Group Policy Objects (GPOs). Its main features are:
- Highlight when a set of Group Policies has redundant settings or internal inconsistencies;
@ -93,13 +89,11 @@ Policy Analyzer lets you treat a set of GPOs as a single unit. This makes it eas
More information on the Policy Analyzer tool can be found on the [Security Guidance blog](https://blogs.technet.microsoft.com/secguide/2016/01/22/new-tool-policy-analyzer/) or by [downloading the tool](https://www.microsoft.com/download/details.aspx?id=55319).
## What is the Local Group Policy Object (LGPO) tool?
### What is the Local Group Policy Object (LGPO) tool?
LGPO is a tool for transferring Group Policy directly between a hosts registry and a GPO backup file, bypassing the Domain Controller. This gives administrators a simple way to verify the effects of their Group Policy settings directly.
Documentation for the LGPO tool can be found on the [Security Guidance blog](https://blogs.technet.microsoft.com/secguide/2016/01/21/lgpo-exe-local-group-policy-object-utility-v1-0/) or by [downloading the tool](https://www.microsoft.com/download/details.aspx?id=55319).
<br />
## Version Matrix
**Client Versions**
@ -147,8 +141,6 @@ Internet Explorer 11 | [SecGuide](https://blogs.technet.microsoft.com/secguide/2
> [!NOTE]
> Browser baselines are built-in to new OS versions starting with Windows 10
<br />
## Frequently asked questions (FAQ)
**What is the Microsoft Security Compliance Manager (SCM)?**
@ -205,7 +197,7 @@ No. SCM only supported SCAP 1.0, which was not updated as SCAP evolved. The new
![Community](images/community.png)
<br />
## See Also