The Windows 7 SP1 Security Compliance Baseline is integrated with the Microsoft Security Compliance Manager (SCM) tool. To access the Windows 7 SP1 Security Guide included with this baseline, download SCM 2.5.

SCM 2.5 is a free tool from the Microsoft Solution Accelerators Team that enables you to quickly configure and manage your computers, traditional datacenter, and private cloud using Group Policy and Microsoft System Center Configuration Manager. The entire Windows 7 SP1 Security and Compliance Baseline package is available through SCM 2.5. The tool is designed to provide you with an end-to-end solution to help you plan, deploy, and monitor security baselines for computers running Windows operating systems, and other Microsoft products in your environment.

See the SCM Getting Started wiki for information about installing SCM 2.5 and to orient you with the tool’s console and integrated Help guidance.

These release notes are carefully and closely monitored. The SCM engineering team regularly improves the tool and maintains this article to share the latest release information and known issues. Any changes that you make will be evaluated and then quickly accepted, refined, or reverted. Because this is a wiki, additions or refinements to these release notes might have been made by community members.

Please direct questions and comments about SCM 2.5 to secwish@microsoft.com.

 

Download and Online Locations

Baseline Components

The Windows 7 SP1 Security and Compliance Baseline available in SCM 2.5 includes the following components:

  • Attachments
    • Windows 7 SP1 Security Guide.docx (version 2.0)
    • Extended DCM Checks.docx
    • Win7SP1_IT_GRC_MCA_MP.cab
  • Baselines
    • Windows 7 SP1 BitLocker Security v1.0
    • Windows 7 SP1 Computer Security Compliance v1.0
    • Windows 7 SP1 Domain Security Compliance v1.0
    • Windows 7 SP1 Extended DCM Checks v1.0
    • Windows 7 SP1 User Security Compliance v1.0

Version History

Version 1.0 of the Windows 7 SP1 Security and Compliance Baseline (February 2012).

Version 1.0 of the Windows 7 Security Baseline was released with SCM v1.0.0.0 (April 6, 2010).

Version 1.0 of the Windows 7 Security Compliance Management Toolkit (October 27, 2009).

Known Issues

The following are known issues for the Windows 7 SP1 Security Compliance Baseline:

  • The domain part of the account in the format of domain\user is missing after importing the setting "Profile System Performance" from a GPO. The workaround for this issue is to manually define the domain part of the account in the SCM UI after importing this setting from a GPO (February 2012).
  • The value of the setting "Allow users to connect remotely using Remote Desktop Services" is imported incorrectly when a GPO contains this setting. The workaround for this issue is to manually configure the setting value in the SCM UI (February 2012).