locked
Preferences within SCM v2 RRS feed

  • Question

  • Hello,

    I have installed SCM 'Security Complinace Manager' v2 and now trying to add in GPO 'Software Restriction Policy' settings and 'Local Users and Groups' Prefences or 'Restricted Groups', but I can't see how to add these settings in.

    Any ideas?

    Cheers,

    cosmo

    Tuesday, September 27, 2011 6:11 AM

Answers

  • yes, that's what is supposed to happen. I wasn't involved in developing or testing those features so I haven't actually used them. I work with the folks who did, so if you run into problems we want to know the details.
    Kurt Dillard http://www.kurtdillard.com
    • Marked as answer by cosmo1 Tuesday, September 27, 2011 10:23 PM
    Tuesday, September 27, 2011 9:52 PM

All replies

  • Cosmo;

    SCM 2.0 doesn't support those group policy settings.


    Kurt Dillard http://www.kurtdillard.com
    • Proposed as answer by Kurt Dillard Tuesday, September 27, 2011 2:22 PM
    Tuesday, September 27, 2011 2:18 PM
  • Is there any official MS URL that states this fact, as I couldn't find it?

    So, how can I create a Default Domain policy that applies my required staff members into the this domain group and 'Local Admins' on the servers, like what Preferences 'Local Users and Groups' provides?

    Cheers,

    Cosmo

    Tuesday, September 27, 2011 8:44 PM
  • Cosmo;

    I'm not sure if anyone in my group has posted a list of all the stuff available in gpedit.msc that SCM 1.0 or SCM 2.0 does not support. The Wiki has a lot of useful information: http://social.technet.microsoft.com/wiki/contents/articles/774.aspx, but i'm not sure that addresses this specifically.

    You can import GPOs into SCM 2.0 that include settings which SCM doesn't recognize, SCM will not display them or include them in exports to Excel spreadsheets, DCM, or SCAP but when you export that same baseline as a GPO those settings should be present in the GPO. If you expiriment with this and run into any difficulties please let us know.

     

    Kurt


    Kurt Dillard http://www.kurtdillard.com
    Tuesday, September 27, 2011 9:36 PM
  • So, can I create a new policy via GPMC, add the required 'Software Restriction Policy' settings and 'Local Users and Groups' Prefences or 'Restricted Groups' into it. Then import it into SCM v2 and merge it with the required SCM template and then export it again??

    Will all these settings hold when linked back into AD?

    Tuesday, September 27, 2011 9:50 PM
  • yes, that's what is supposed to happen. I wasn't involved in developing or testing those features so I haven't actually used them. I work with the folks who did, so if you run into problems we want to know the details.
    Kurt Dillard http://www.kurtdillard.com
    • Marked as answer by cosmo1 Tuesday, September 27, 2011 10:23 PM
    Tuesday, September 27, 2011 9:52 PM
  • Thanks again  :-)
    Tuesday, September 27, 2011 10:24 PM