Applies To: Windows Server 2016, Windows Server 2012 R2, Windows Server 2012
Transforms a security policy file generated by using the Security Configuration Wizard (SCW) into a new Group Policy Object (GPO) in active directory Domain Services. The transform operation does not change any settings on the server where it is performed. After the transform operation has completed, an administrator must link the GPO to the desired OUs to deploy the policy to servers. Domain administrator credentials are needed to complete the transform operation.
Internet Information Services (IIS) security policy settings cannot be deployed by using Group Policy.
Firewall policies that list approved applications should not be deployed to servers unless the Windows Firewall service started automatically when the server was last started. for examples of how this command can be used, see Examples.
scwcmd transform /p:<Policyfile.xml> /g:<GPODisplayName>
|/p:||Specifies the path and file name of the .xml policy file that should be applied. This parameter must be specified.|
|/g:||Specifies the display name of the GPO. This parameter must be specified.|
|/?||Displays help at the command prompt.|
Scwcmd.exe is only available on computers running Windows Server 2008 R2, Windows Server 2008, or Windows Server 2003.
To create a GPO named FileServerSecurity from a file named FileServerPolicy.xml, type:
scwcmd transform /p:FileServerPolicy.xml /g:FileServerSecurity