Skip to main content


Microsoft Security Compliance Manager

Microsoft Security Compliance Manager (SCM) is a free tool from the Microsoft Solution Accelerators team. With SCM you can quickly configure and manage your computers, traditional datacenter, and private cloud using Group Policy and Microsoft System Center Configuration Manager.

Current Version

The latest release, SCM 2.5, is now available for download. New and updated product baselines (Microsoft product-specific security policy configurations) are integrated with SCM 2.5 with setting severity ratings.  These baselines take full advantage of security features and options in Microsoft Exchange Server 2010 SP2 and Exchange Server 2007 SP3.

About This Solution Accelerator

SCM 2.5 provides ready-to-deploy policies and DCM configuration packs that are tested, fully supported, and based on Microsoft Security Guide recommendations and industry best practices.

With SCM 2.5, you can:

  • Manage configuration drift, address compliance requirements, and reduce security threats.
  • Easily configure the latest Windows operating systems, Microsoft Office applications, and Internet Explorer.
  • Use IT Governance, Risk, and Compliance (IT GRC) baselines with new compliance-based setting groups that allow quicker and easier compliance reporting and audit preparation.
  • Import the configuration of a “golden master” reference machine or existing Group Policy.
  • Seamlessly create new policies and DCM configuration packs in a user-friendly UI designed to work with Microsoft System Center Configuration Manager 2007 R2.

Additional Resources

The following resources provide additional information about security topics and Microsoft Security Solution Accelerators: