Share via



Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows 8

The Scwcmd.exe command line-tool included with the Security Configuration Wizard (SCW) can be used to perform the following tasks:

  • Configure one or many servers with an SCW-generated policy.

  • Analyze one or many servers with an SCW-generated policy.

  • View analysis results in HTML format.

  • Roll back SCW policies.

  • Transform an SCW-generated policy into native files that are supported by Group Policy.

  • Register a Security Configuration Database extension with SCW.

When you use scwcmd to configure, analyze, or roll back a policy on a remote server, SCW must be installed on the remote server.


scwcmd <command> [<subcommand>]





Determines whether a computer is in compliance with a policy.

See Scwcmd: analyze for syntax and options.


Applies an SCW-generated security policy to a computer.

See Scwcmd: configure for syntax and options.


Extends or customizes the SCW Security Configuration Database by registering a Security Configuration Database file that contains role, task, service, or port definitions.

See Scwcmd: register for syntax and options.


Applies the most recent rollback policy available, and then deletes that rollback policy.

See Scwcmd: rollback for syntax and options.


Transforms a security policy file generated by using SCW into a new Group Policy object (GPO) in Active Directory Domain Services.

See Scwcmd: transform syntax and options.


Renders an .xml file by using a specified .xsl transform.

See Scwcmd: view for syntax and options.


Displays help at the command prompt.

Additional references