News

Microsoft Updates Security Compliance Manager Tool

Microsoft on Friday issued an update of its Security Compliance Manager tool, which helps IT pros set security policies for some Microsoft software.

The update improves over the initial release in April by including documentation and guidance materials within the tool, according to a Microsoft TechNet library article. Security Compliance Manager is a free Microsoft "solution accelerator" that works with Microsoft's System Center Configuration Manager 2007 management product. It's considered to be "the next evolution of the Microsoft Security Compliance Management Toolkit" series, the article explains.

IT pros can use the tool to download recommended security baseline configuration settings for a number of key Microsoft products, including Windows XP, Vista, Windows 7, Windows Server 2003, Windows Server 2008, Internet Explorer 8 and Office 2007.

The updated Security Compliance Manager can be downloaded here, along with release notes and a "Getting Started Guide" that Microsoft published in June. The tool runs on Windows 7 and Windows Vista Service Pack 2.

To customize security settings, IT pros can make copies of the baseline files and then modify the baseline settings. These customized settings can then be exported across the computing environment via Group Policy.

The tool offers a number of export formats, such as Excel, Group Policy objects, desired configuration management (DCM) packs or the Security Content Automation Protocol, according to TechNet. However, Microsoft's "Getting Started Guide" recommends the DCM format, which works with System Center Configuration Manager to help monitor the security baselines.

"The desired configuration management (DCM) feature of System Center Configuration Manager 2007 monitors server or client computers against a single or multiple security baselines," the Guide states. "To take advantage of this scanning feature, use the Security Compliance Manager to produce DCM configuration packs based on your security baselines."

In addition to enabling custom security settings, the tool can be used to check how closely an organization's existing security settings match up with Microsoft's best-practice recommendations.

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

  • Report: Cost, Sustainability Drive DaaS Adoption Beyond Remote Work

    Gartner's 2025 Magic Quadrant for Desktop as a Service reveals that while secure remote access remains a key driver of DaaS adoption, a growing number of deployments now focus on broader efficiency goals.

  • Windows 365 Reserve, Microsoft's Cloud PC Rental Service, Hits Preview

    Microsoft has launched a limited public preview of its new "Windows 365 Reserve" service, which lets organizations rent cloud PC instances in the event their Windows devices are stolen, lost or damaged.

  • Hands-On AI Skills Now Outshine Certs in Salary Stakes

    For AI-related roles, employers are prioritizing verifiable, hands-on abilities over framed certificates -- and they're paying a premium for it.

  • Roadblocks in Enterprise AI: Data and Skills Shortfalls Could Cost Millions

    Businesses risk losing up to $87 million a year if they fail to catch up with AI innovation, according to the Couchbase FY 2026 CIO AI Survey released this month.