mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-19 12:23:37 +00:00
Further edits to Windows Security Baselines topic.
This commit is contained in:
@ -1,13 +1,13 @@
|
||||
---
|
||||
title: Microsoft Security Baselines
|
||||
description: This article, and the articles it links to, describe how to use Microsoft Security Baselines in your organization
|
||||
|
||||
keywords: virtualization, security, malware
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: deploy
|
||||
ms.localizationpriority: high
|
||||
author: sagaudre
|
||||
---
|
||||
|
||||
# Microsoft Security Baselines
|
||||
|
||||
**Applies to:**
|
||||
@ -48,20 +48,16 @@ You can use security baselines to:
|
||||
|
||||
You can get the security baselines using the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=55319). This download page is for the Security Compliance Toolkit which comprises tools that can assist an admin with managing the baselines in addition to the actual security baselines.
|
||||
|
||||
<br />
|
||||
|
||||

|
||||
|
||||
<br />
|
||||
|
||||
## Microsoft Security Compliance Toolkit 1.0
|
||||
|
||||
#### What is the Security Compliance Toolkit (SCT)?
|
||||
### What is the Security Compliance Toolkit (SCT)?**
|
||||
|
||||
The Security Compliance Toolkit is a set of tools that allows enterprise security administrators to download, analyze, test, edit and store Microsoft-recommended security configuration baselines for Windows and other Microsoft products.
|
||||
|
||||
It enables the administrators to effectively manage their enterprise’s Group Policy Objects (GPOs). Using the toolkit, administrators can compare their current GPOs with Microsoft-recommended GPO baselines or other baselines, edit them, store them in GPO backup file format, and apply them broadly through Active Directory or individually through local policy.<p></p>
|
||||
|
||||

|
||||
|
||||
The Security Compliance Toolkit consists of:
|
||||
|
||||
- Windows 10 Security Baselines
|
||||
@ -81,7 +77,7 @@ The Security Compliance Toolkit consists of:
|
||||
|
||||
Using the [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=55319), you can download the tools along with the baselines for the relevant Windows versions.
|
||||
|
||||
## What is the Policy Analyzer tool?
|
||||
### What is the Policy Analyzer tool?
|
||||
|
||||
The Policy Analyzer is a utility for analyzing and comparing sets of Group Policy Objects (GPOs). Its main features are:
|
||||
- Highlight when a set of Group Policies has redundant settings or internal inconsistencies;
|
||||
@ -93,13 +89,11 @@ Policy Analyzer lets you treat a set of GPOs as a single unit. This makes it eas
|
||||
|
||||
More information on the Policy Analyzer tool can be found on the [Security Guidance blog](https://blogs.technet.microsoft.com/secguide/2016/01/22/new-tool-policy-analyzer/) or by [downloading the tool](https://www.microsoft.com/download/details.aspx?id=55319).
|
||||
|
||||
## What is the Local Group Policy Object (LGPO) tool?
|
||||
### What is the Local Group Policy Object (LGPO) tool?
|
||||
|
||||
LGPO is a tool for transferring Group Policy directly between a host’s registry and a GPO backup file, bypassing the Domain Controller. This gives administrators a simple way to verify the effects of their Group Policy settings directly.
|
||||
Documentation for the LGPO tool can be found on the [Security Guidance blog](https://blogs.technet.microsoft.com/secguide/2016/01/21/lgpo-exe-local-group-policy-object-utility-v1-0/) or by [downloading the tool](https://www.microsoft.com/download/details.aspx?id=55319).
|
||||
|
||||
<br />
|
||||
|
||||
## Version Matrix
|
||||
|
||||
**Client Versions**
|
||||
@ -147,8 +141,6 @@ Internet Explorer 11 | [SecGuide](https://blogs.technet.microsoft.com/secguide/2
|
||||
> [!NOTE]
|
||||
> Browser baselines are built-in to new OS versions starting with Windows 10
|
||||
|
||||
<br />
|
||||
|
||||
## Frequently asked questions (FAQ)
|
||||
|
||||
**What is the Microsoft Security Compliance Manager (SCM)?**
|
||||
@ -205,7 +197,7 @@ No. SCM only supported SCAP 1.0, which was not updated as SCAP evolved. The new
|
||||
|
||||

|
||||
|
||||
<br />
|
||||
|
||||
|
||||
## See Also
|
||||
|
||||
|
Reference in New Issue
Block a user