Deploying SCW security policy files

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2

This topic discusses the deployment of SCW security policy files.

Security policy files authored with SCW are created as .XML files that are saved by default in %systemdir%\security\msscw\Policies. They can be deployed by using the SCW user interface or by using the scwcmd.exe command-line tool included with SCW.

Using the SCW user interface

This method is best suited for a single server. To apply an SCW security policy to multiple servers, use the command-line method or Group Policy instead.

To apply an SCW security policy to a server

  1. Click Start, click Administrative Tools, and then click Security Configuration Wizard.

  2. Read the Welcome page, and click Next.

  3. On the Configuration Action page, select Apply an existing security policy, type the full path and file name of the policy, and then click Next.

  4. On the Select Server page, type the name of the server to which the policy will be applied, and then click Next.

  5. On the Apply Security Policy page, click Next.

  6. On the Applying Security Policy page, wait for processing to finish, and then click Next.

  7. On the Completing the Security Configuration Wizard page, click Finish.

Using the Command-line method

To configure multiple servers with a policy, you can use **scwcmd configure /p:**PolicyFile **/i:**MachineList at the command prompt, rather than this SCW UI procedure. Type scwcmd configure at the command prompt to learn about the parameters.