You are on page 1of 72

(GCB)

()




GCB

SCM
GCB

1

(1/2)



Service Pack



3
(2/2)


(Site)
(Domain)
(OU)




(GPO)
4






()

90~120

gpupdate /force
5

GCB

7
GCB

AD

LocalGPO
GPO GPOAD LocalGPO

GPO
LocalGPO GPO

GPO
(OU)


9
GPO(1/2)

10
GPO(2/2)

11
GPO
Windows 7
USGCB Account Policy ()
USGCB Windows 7 Computer Energy Policy ()
USGCB Windows 7 Computer Settings ()
USGCB Windows 7 User Settings ()
Windows 7 Firewall
USGCB Windows 7 Firewall Settings ()
IE 8
USGCB Internet Explorer 8 Computer Settings ()
USGCB Internet Explorer 8 User Settings ()

12
ADGCB

AD

LocalGPO
GPO GPOAD LocalGPO

GPO
LocalGPO GPO

GPO
(OU)


13
GPOAD (1/10)

14
GPOAD (2/10)

15
GPOAD (3/10)

16
GPOAD (4/10)

17
GPOAD (5/10)
GPO

18
GPOAD (6/10)
GPO

19
GPOAD (7/10)
GPOGPO

20
GPOAD (8/10)

21
GPOAD (9/10)

22
GPOAD (10/10)
GPO

23
OU
GPO
(OU)
GCB

24
Demo
ADGCB
GCB

AD

LocalGPO
GPO GPOAD LocalGPO

GPO
LocalGPO GPO

GPO
(OU)


26
LocalGPO

27
LocalGPOGPO(1/3)
GPO

28
LocalGPOGPO(2/3)
LocalGPO Command-line

29
LocalGPOGPO(3/3)
LocalGPO
cscript LocalGPO.wsf /path:<GPO
>
GPO

30

31
AD
GPO
[]OU

[]

32
(1/2)
(cmd)

33
(2/2)
LocalGPO
cscript LocalGPO.wsf /Restore

34

LocalGPOGCB
GCB



AD Server

Microsoft Security Compliance Manager (SCM)
Windows 7

37
GCB

GCBGPO
GPO
GPO


GCBGPO
SCMGPO

GPOLocalGPO

38
AD Demo
SCM(1/10)
Microsoft .NET Framework 4
http://www.microsoft.com/zh-
tw/download/details.aspx?id=17718

40
SCM(2/10)
SCM(3.0)
http://gallery.technet.microsoft.com/LocalGPOmsi-
Excellent-MS-2593b2eb

41
SCM(3/10)

Security_Compliance_Manager_Setup.exe

42
SCM(4/10)
Welcome to the Security Compliance Manager
SetupNext

43
SCM(5/10)
License AgreementI accept the terms
of the license agreementNext

44
SCM(6/10)
Installation FolderFolder
Next

45
SCM(7/10)
SQL Server 2008 Express
Next

46
SCM(8/10)
License AgreementI accept the terms
of the license agreementNext

47
SCM(9/10)
SQL Server 2008 ExpressRead to
InstallInstallSCM

48
SCM(10/10)
Installation SuccessfulFinish

49
SCM
SCM
/GPO
/GPO
/GPO
/// GPO

51
GPO(1/2)
ImportGPO Backup (folder)

52
GPO(2/2)
GPO

SCMGPOOK

53
GPO(1/2)
SCMGPO
ExportGPO Backup folder

54
GPO(2/2)
GPO
GPO

55
2GPO(1/4)
1GPO
BaselineCompare/Merge

56
2GPO(2/4)
GPOOK

57
2GPO(3/4)
Compare Baselines2GPO
Merge Baselines

58
2GPO(4/4)
GPOOK

59
GPO(1/2)
GPOAdvanced
View

60
GPO(2/2)

61

(1/5)
gpedit.msc

63
(2/5)
Windows
Internet Explorer



64
(3/5)

65
(4/5)

(member.nat.gov.tw)
2

1 2

3
66
(5/5)
cmd.exegpupdate /force

67

Demo

69

71