Securing Your Deployment With Group Policy
Your deployment is completed, you have moved to Windows XP from XP. How do you go about recreating all those group policy objects you had for Windows XP into Windows 7.
The easy answer to that question is you don’t. Windows 7 is so different from Windows XP, that cutting and changing will take some time. It’s also a great opportunity if your GPOs are a bit all over to have a tidy up and start again.
Thankfully Microsoft have a free solution accelerator called Security Compliance Manager or SCM for short. SCM allows you to create among other things group policy templates and SCCM DCM baselines. These working together with remediation packages to resolve problems advertised to clients which fail baselines in SCCM will make your environment much more secure and reduce the amount of configuration drift which can cause support problems.
SCM allows you to create baselines against industry standard best practices with detailed explainations of all the settings so you understand the implications of setting. Best of all it’s free! Download it from the Microsoft website.