Scwcmd

  • Article

 

Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows 8

The Scwcmd.exe command line-tool included with the Security Configuration Wizard (SCW) can be used to perform the following tasks:

  • Configure one or many servers with an SCW-generated policy.

  • Analyze one or many servers with an SCW-generated policy.

  • View analysis results in HTML format.

  • Roll back SCW policies.

  • Transform an SCW-generated policy into native files that are supported by Group Policy.

  • Register a Security Configuration Database extension with SCW.

When you use scwcmd to configure, analyze, or roll back a policy on a remote server, SCW must be installed on the remote server.

Syntax

scwcmd <command> [<subcommand>]

Parameters

Subcommand

Description

/analyze

Determines whether a computer is in compliance with a policy.

See Scwcmd: analyze for syntax and options.

/configure

Applies an SCW-generated security policy to a computer.

See Scwcmd: configure for syntax and options.

/register

Extends or customizes the SCW Security Configuration Database by registering a Security Configuration Database file that contains role, task, service, or port definitions.

See Scwcmd: register for syntax and options.

/rollback

Applies the most recent rollback policy available, and then deletes that rollback policy.

See Scwcmd: rollback for syntax and options.

/transform

Transforms a security policy file generated by using SCW into a new Group Policy object (GPO) in Active Directory Domain Services.

See Scwcmd: transform syntax and options.

/view

Renders an .xml file by using a specified .xsl transform.

See Scwcmd: view for syntax and options.

/?

Displays help at the command prompt.

Additional references