scwcmd transform
Transforms a security policy file generated by using the Security Configuration Wizard (SCW) into a new Group Policy Object (GPO) in Active Directory Domain Services. The transform operation does not change any settings on the server where it is performed. After the transform operation has completed, an administrator must link the GPO to the desired OUs to deploy the policy to servers.
Important
Domain administrator credentials are needed to complete the transform operation.
Internet Information Services (IIS) security policy settings can't be deployed by using Group Policy.
Firewall policies that list approved apps shouldn't be deployed to servers unless the Windows Firewall service started automatically when the server was last started.
Syntax
scwcmd transform /p:<policyfile.xml> /g:<GPOdisplayname>
Parameters
Parameter | Description |
---|---|
/p:<policyfile.xml> |
Specifies the path and file name of the .xml policy file that should be applied. This parameter must be specified. |
/g:<GPOdisplayname> |
Specifies the display name of the GPO. This parameter must be specified. |
/? | Displays help at the command prompt. |
Examples
To create a GPO named FileServerSecurity from a file named FileServerPolicy.xml, type:
scwcmd transform /p:FileServerPolicy.xml /g:FileServerSecurity