Configuration Manger 2007 has a great feature called Desired Configuration Management (DCM).\u00a0 It’s pretty easy to understand and use.\u00a0 You define a standard using queries of the registry, WMI and the file system to say what must be present, not present or what settings are valid, e.g. "this service must be disabled".\u00a0 Anything not meeting this compliance statement can be reported and acted on.\u00a0 In theory you could build a collection based on this data and enact an automated response.<\/p>\n
MS has released<\/a> the SCAP Conversion Tool for Desired Configuration Manager that will enable you to convert Security Content Automation Protocol files into files that can be used by DCM.<\/p>\n They’ve also released a Security Compliance Management Toolkit<\/a> to help you how to plan, deploy, monitor, and remediate a security baseline.<\/p>\n","protected":false},"excerpt":{"rendered":" Configuration Manger 2007 has a great feature called Desired Configuration Management (DCM).\u00a0 It’s pretty easy to understand and use.\u00a0 You define a standard using queries of the registry, WMI and the file system to say what must be present, not present or what settings are valid, e.g. "this service must be disabled".\u00a0 Anything not meeting … Continue reading “New SCCM 2007 Desired Configuration Management Releases”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_wpcom_ai_launchpad_first_post":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-9064","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t