scwcmd

Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2012 R2 and Windows Server 2012

The Scwcmd.exe command-line tool included with the Security Configuration Wizard (SCW) can be used to perform the following tasks:

  • Analyze one or many servers with an SCW-generated policy.

  • Configure one or many servers with an SCW-generated policy.

  • Register a Security Configuration Database extension with SCW.

  • Rollback SCW policies.

  • Transform an SCW-generated policy into native files that are supported by Group Policy.

  • View analysis results in HTML format.

Note

If you use scwcmd to configure, analyze, or roll back a policy on a remote server, SCW must be installed on the remote server.

Syntax

scwcmd analyze
scwcmd configure
scwcmd register
scwcmd rollback
scwcmd transform
scwcmd view

Parameters

Parameter Description
scwcmd analyze Determines whether a computer is in compliance with a policy.
scwcmd configure Applies an SCW-generated security policy to a computer.
scwcmd register Extends or customizes the SCW Security Configuration Database by registering a Security Configuration Database file that contains role, task, service, or port definitions.
scwcmd rollback Applies the most recent rollback policy available, and then deletes that rollback policy.
scwcmd transform Transforms a security policy file generated by using SCW into a new Group Policy object (GPO) in Active Directory Domain Services.
scwcmd view Renders an .xml file by using a specified .xsl transform.