The Scwcmd.exe command line-tool included with the Security Configuration Wizard (SCW) can be used to perform the following tasks:
-
Configure one or many servers with an SCW-generated policy.
-
Analyze one or many servers with an SCW-generated policy.
-
View analysis results in HTML format.
-
Roll back SCW policies.
-
Transform an SCW-generated policy into native files that are supported by Group Policy.
-
Register a Security Configuration Database extension with SCW.
When you use scwcmd to configure, analyze, or roll back a policy on a remote server, SCW must be installed on the remote server.
scwcmd <command> [<subcommand>]
|
Subcommand
|
Description
|
|
/analyze
|
Determines whether a computer is in compliance with a policy.
See Scwcmd: analyze for syntax and options.
|
|
/configure
|
Applies an SCW-generated security policy to a computer.
See Scwcmd: configure for syntax and options.
|
|
/register
|
Extends or customizes the SCW Security Configuration Database by registering a Security Configuration Database file that contains role, task, service, or port definitions.
See Scwcmd: register for syntax and options.
|
|
/rollback
|
Applies the most recent rollback policy available, and then deletes that rollback policy.
See scwcmd rollback for syntax and options.
|
|
/transform
|
Transforms a security policy file generated by using SCW into a new Group Policy object (GPO) in Active Directory Domain Services.
See Scwcmd: transform syntax and options.
|
|
/view
|
Renders an .xml file by using a specified .xsl transform.
See Scwcmd: view for syntax and options.
|
|
/?
|
Displays help at the command prompt.
|