Security Configuration Wizard command-line tool

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Security Configuration Wizard (SCW) includes the Scwcmd.exe command-line tool. You can use Scwcmd for the following tasks:

  • Configure one or many servers with an SCW-generated policy.

  • Analyze one or many servers with an SCW-generated policy.

  • View analysis results in HTML format.

  • Roll back SCW policies.

  • Transform an SCW-generated policy into native files that are supported by Group Policy.

  • Register a Security Configuration Database extension with SCW.

When you use scwcmd to configure, analyze, or roll back a policy on a remote server, SCW is required to be installed on the remote server.

Getting command-line help for Scwcmd

To get basic help on the Scwcmd tool, at a command prompt, type scwcmd.

Viewing formatted analysis results with the scwcmd /view command

The directory %windir%\security\msscw\transformfiles contains .xsl transform files. These are applied to the .xml policy file for the rendering process when you view analysis results through the scwcmd /view command.