RE: How to apply SCW policy to another server?

Hi,

Glad to be of assistance.


Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------
Thread-Topic: How to apply SCW policy to another server?
thread-index: AcZ45kTrsnGLidlHT/qTAtCali8nxg==
X-WBNR-Posting-Host: 70.171.42.251
From: =?Utf-8?B?U3RldmVQ?= <SteveP@xxxxxxxxxxxxxx>
References: <0D98625B-E486-4AD6-BC54-1F4C7557B0FC@xxxxxxxxxxxxx>
<rwTfTCJeGHA.5432@xxxxxxxxxxxxxxxxxxxxx>
Subject: RE: How to apply SCW policy to another server?
Date: Tue, 16 May 2006 05:43:02 -0700
Lines: 90
Message-ID: <8B966D80-449B-48F1-A275-AED449AC84EA@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
Newsgroups: microsoft.public.windows.server.general
Path: TK2MSFTNGXA01.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.general:96114
NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
X-Tomcat-NG: microsoft.public.windows.server.general

Thank you, Vincent.
--
Thanks, Steve


"Vincent Xu [MSFT]" wrote:

Hi,

You can refer to following steps:

To apply an SCW security policy during the unattended installation,
also
carry out the following steps.

1. Create the security policy file on a server that already has SCW
installed.

2. Either create a Cmdlines.txt file or modify the existing one so
that it
has a [Commands] section containing the following line:

scwcmd configure /p:SCWPolicy.xml

3. Copy the Cmdlines.txt file and the previously created policy file
(SCWPolicy.xml in this case) to the $OEM$ directory.

You can refer to the article as below:

<http://technet2.microsoft.com/WindowsServer/en/Library/5254f8cd-143e-4559-a
299-9c723b3669461033.mspx?mfr=true>

Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader
so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no
rights.
======================================================



--------------------
Thread-Topic: How to apply SCW policy to another server?
thread-index: AcZ4TrI725ainV4VTbytfjuLb/NXXQ==
X-WBNR-Posting-Host: 70.171.42.251
From: =?Utf-8?B?U3RldmVQ?= <SteveP@xxxxxxxxxxxxxx>
Subject: How to apply SCW policy to another server?
Date: Mon, 15 May 2006 11:38:01 -0700
Lines: 14
Message-ID: <0D98625B-E486-4AD6-BC54-1F4C7557B0FC@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
Newsgroups: microsoft.public.windows.server.general
Path: TK2MSFTNGXA01.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.general:96058
NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
X-Tomcat-NG: microsoft.public.windows.server.general

I have been practicing running the SCW on a 2003 standard server
test
box to
get a feel for it before I use it on the 2003 standard server network.

I am ready to run it on a primary domain controller (DC1). If all
goes
well
I will then want to apply this same policy to the secondary DC (DC2)
which is
a mirror image of the primary DC.

There was no place in the wizard to apply the policy to another
server.

I assume this must be done through the command line interface.

What is the command to apply the SCW policy from DC1 to DC2?
--
Thanks, Steve





.

Relevant Pages

  • RE: How to apply SCW policy to another server?
    ... Create the security policy file on a server that already has SCW ...
    (microsoft.public.windows.server.general)
  • RE: How to apply SCW policy to another server?
    ... Create the security policy file on a server that already has SCW ...
    (microsoft.public.windows.server.general)
  • Re: More on spam
    ... For the sake of the open community, ... of the Debian community please _do not_ change the policy. ... enjoy you posts as I enjoy everyone's posts on this list but as a fellow ... Did you file a complaint with your ISP? ...
    (Debian-User)
  • Re: config tool and policy for REMOTE server
    ... Instead I created a policy file for a service on ... I have a remote web server and I have always ... Granted I'm not always going to use the config tool to write my policy files ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: [AppArmor 39/45] AppArmor: Profile loading and manipulation, pathname matching
    ... around your system you need to define policy so that your unrestricted users must have access to every label, and every time you create a new label you need to go back to all your policies to see if the new label needs to be allowed from that policy ... For example, you could set up a "logfile" attribute which allows logrotate to archive old versions and allows audit- admin users to modify/delete them, then whenever you need to add a new logfile you just declare the "my_foo_log_t" type to have the "logfile" attribute. ... My logrotate policy file would depend on the syslog policy and would declare the logrotate daemon type as a "logdaemon", and additionally allow logrotate to read, rename, append, and delete "logfile" types. ...
    (Linux-Kernel)