Import/Export Group Policy Delta between Microsoft Baselines and own Policies

Question

Hello,

we are trying to create a Delta between the Microsoft Baselines and our own Policies. Is there a way to create a GPO Backup from such a Delta? Right now we are only able to create a "view" of this Delta by using the Policy Analyzer from the Microsoft Security Compliance Toolkit. However the Policy Analyzer can only read data and not import or export the view into a GPO Backup for further usage.

The predeccesor to SCT, Security Compliance Manager (SCM) actually had this ability of functionality but its not supported any longer. Trying to import Baselines or own GPOs into it means there will be many configurations missing.

Does anybody have an alternative, or did this function die with SCM ?

Thanks for your help!

Answer 1

Hello @ComfortableOnion ,

Thank you for posting here.

Based on my knowledge, Security Compliance Manager (SCM) has already retired.

Security Compliance Manager (SCM) retired; new tools and procedures
https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-compliance-manager-scm-retired-new-tools-and-procedures/ba-p/701059

You can now use new “Security Compliance Toolkit”. If you cannot import or export the view into a GPO Backup via SCT, it seems there is no such function to import or export the view into a GPO Backup via SCT.

For more information about SCT, please refer to links below.

Microsoft Security Compliance Toolkit 1.0
https://learn.microsoft.com/en-us/windows/security/threat-protection/security-compliance-toolkit-10

Microsoft Security Compliance Toolkit 1.0
https://www.microsoft.com/en-us/download/details.aspx?id=55319

Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

policy analyzer can't export, but LGPO (also part of SCT) can :)

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/lgpo-exe-local-group-policy-object-utility-v1-0/ba-p/701045

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/lgpo-exe-v2-0-pre-release-support-for-mlgpo-and-reg-qword/ba-p/701052