Microsoft Security Compliance Toolkit

Analyze and compare GPO against baselines.

Microsoft Security Compliance Toolkit1 allows to compare your GPO against a baseline. There are several recommended policies available. To start check out the DoD guidelines https://public.cyber.mil/stigs/gpo/.

Installation

Download the PolicyAnalyzer from https://www.microsoft.com/en-us/download/details.aspx?id=55319.

Usage

  1. Execute the PolicyAnalyzer.exe.
  2. Add Baseline GPO’s like from the DoD
  3. Select Imported Policy and click “View / Compare”
  4. Check the results, under View you can also filter for only Differences or Conflicts.

  1. Microsoft SCT ↩︎