![microsoft sccm support microsoft sccm support](https://cloudblogs.microsoft.com/uploads/prod/sites/26/2019/03/DPM-Alerts-and-Reports-using-Log-Analytics-1024x403.png)
DCM would just consume them and you would make no further edits: SCM is this thus your master library. Library – you can perform all your edits within SCM and export the resultant baselines.Transit point – you can simply use SCM as a way station for downloading Microsoft’s recommended baselines, exporting them to DCM, then doing all editing work within DCM and dispensing with SCM.
![microsoft sccm support microsoft sccm support](https://image.slidesharecdn.com/desktopmanagementwithsccm-110328084003-phpapp01/85/desktop-management-using-microsoft-sccm-2-320.jpg)
There are several basic ways to use SCM in conjunction with SCCM DCM: SCM can also output SCAP content (a widely-used industry format) or even Group Policy Objects. In our case, we’ll export the settings to a DCM format (stored in a CAB file) suitable for use within SCCM. To actually utilize SCM content, one exports baselines to a variety of formats, which are then consumed by other tools. SCM is principally an editing and organizing tool. This baseline is a collection of default security settings deemed by Microsoft (and vetted by thousands of organizations worldwide) to be reasonable options for a typical corporate laptop.
#Microsoft sccm support install
You can duplicate the baselines by hand but SCM makes an initial batch for you when you install the utility, based on your organization name, as here with “Kraft Kennedy Baselines”:įor our example, since this blog series has been focussed on laptop security we’ll work with Kraft Kennedy Baselines > Windows 7 > “Copy of Win7-EC-Laptop 1.0”, which I’ve renamed to make its purpose clearer: These are read-only and must be cloned in order to make edits. Out-of-the-box, SCM installs several Microsoft-vetted security baselines. A simple option if you have multiple admins who will be using the tool is to install SCM on a server and remote into it when you need to work with the utility. By default it creates a local SQL 2008 Express instance and isn’t centralized in any way (though the baselines you export for use by SCCM will be copied to the central SCCM server). SCM installs and runs on any workstation or server. At the time of writing, SCM 2.0 is nearing release and I’m using a final beta release.
#Microsoft sccm support how to
I won’t go over how to obtain and install SCM - there is plenty of material on the web, including this intro video.
![microsoft sccm support microsoft sccm support](https://www.anoopcnair.com/wp-content/uploads/2018/12/SCCM-Troubleshooting-Tool-Support-Center-Log-Viewer-1-1024x538.jpg)
In addition, various third parties offer their own baselines and you can copy and build upon any of them within SCM.
#Microsoft sccm support download
One can download recommended baselines from Microsoft for a variety of operating systems, import them into SCM, edit them and export them to a variety of formats. While there are third-party products that can do even more, SCM is effective in its own right and free is hard to beat. One of Microsoft’s vaunted “Solution Accelerators,” Security Compliance Manager (SCM) is a freely-downloadable utility used by thousands of organizations for managing their computer security baselines. Continuing our laptop security focus from last time, in this blog post we’ll look at how to use Microsoft’s Security Compliance Manager toolkit to feed security baselines into DCM. Now that we understand the low-level details, it’s time to build on that foundation. In the first four parts of this series, we covered SCCM Desired Configuration Management (DCM) in depth and went over the creation and use of custom baselines.