Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I have several security policy files (INF exported from different Windows machines) which I need to audit. Is there any automatic tool you know of, that can analyse those files according to best practice that I'll provide?

share|improve this question

closed as off-topic by raz, schroeder, Mark, Jens Erat, Rory Alsop Jan 26 at 12:08

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

    
I would do this with C# as a Desktop app, just make a list of threats and loop thru the files, and the practice can be made within template ini file. –  Andrew Smith Jul 29 '12 at 17:04

1 Answer 1

up vote 1 down vote accepted

Microsoft Security Baseline Analyzer and Security Compliance Manager are Microsoft's tools for this.

SCM is likely the one you are looking for...

share|improve this answer
    
MSBA I know, and it can't check exported policy files. SCM I know a bit less, and I couldn't find automatic way for analysing INF files in t as well. Google didn't help. Currently importing the settings to VM and then running MSBA, but surly there is better solution than that... –  Boaz Tirosh Jul 31 '12 at 21:17

Not the answer you're looking for? Browse other questions tagged or ask your own question.