(GCB)

()



GCB

SCM
GCB

1

 (1/2)



Service Pack

3
 (2/2)


(Site)
(Domain)
(OU)




(GPO)
4






()

90~120

gpupdate /force
5


GCB

7
GCB


AD

LocalGPO
GPO GPOAD LocalGPO

GPO
LocalGPO GPO

GPO
(OU)

9
GPO(1/2)

10
GPO(2/2)

11
 GPO
Windows 7
USGCB Account Policy ()
USGCB Windows 7 Computer Energy Policy ()
USGCB Windows 7 Computer Settings ()
USGCB Windows 7 User Settings ()
Windows 7 Firewall
USGCB Windows 7 Firewall Settings ()
IE 8
USGCB Internet Explorer 8 Computer Settings ()
USGCB Internet Explorer 8 User Settings ()

12
 ADGCB

AD

LocalGPO
GPO GPOAD LocalGPO

GPO
LocalGPO GPO

GPO
(OU)

13
 GPOAD (1/10)

14
 GPOAD (2/10)

15
 GPOAD (3/10)

16
 GPOAD (4/10)

17
 GPOAD (5/10)
GPO

18
 GPOAD (6/10)
GPO

19
 GPOAD (7/10)
GPOGPO

20
 GPOAD (8/10)

21
 GPOAD (9/10)

22
 GPOAD (10/10)
GPO

23
 OU
GPO
(OU)
GCB

24
 Demo
ADGCB
 GCB

AD

LocalGPO
GPO GPOAD LocalGPO

GPO
LocalGPO GPO

GPO
(OU)

26
LocalGPO

27
 LocalGPOGPO(1/3)
GPO

28
 LocalGPOGPO(2/3)
LocalGPO Command-line

29
 LocalGPOGPO(3/3)
LocalGPO
cscript LocalGPO.wsf /path:<GPO
>
GPO

30


31
 AD
GPO
[]OU

[]

32
 (1/2)
(cmd)

33
 (2/2)
LocalGPO
cscript LocalGPO.wsf /Restore

34

LocalGPOGCB
GCB



AD Server

Microsoft Security Compliance Manager (SCM)
Windows 7

37
 GCB

GCBGPO
GPO
GPO


GCBGPO
SCMGPO

GPOLocalGPO

38
AD Demo
 SCM(1/10)
Microsoft .NET Framework 4
http://www.microsoft.com/zh-
tw/download/details.aspx?id=17718

40
 SCM(2/10)
SCM(3.0)
http://gallery.technet.microsoft.com/LocalGPOmsi-
Excellent-MS-2593b2eb

41
 SCM(3/10)

Security_Compliance_Manager_Setup.exe

42
 SCM(4/10)
Welcome to the Security Compliance Manager
SetupNext

43
 SCM(5/10)
License AgreementI accept the terms
of the license agreementNext

44
 SCM(6/10)
Installation FolderFolder
Next

45
 SCM(7/10)
SQL Server 2008 Express
Next

46
 SCM(8/10)
License AgreementI accept the terms
of the license agreementNext

47
 SCM(9/10)
SQL Server 2008 ExpressRead to
InstallInstallSCM

48
 SCM(10/10)
Installation SuccessfulFinish

49
SCM
 SCM
/GPO
/GPO
/GPO
/// GPO

51
 GPO(1/2)
ImportGPO Backup (folder)

52
 GPO(2/2)
GPO

SCMGPOOK

53
 GPO(1/2)
SCMGPO
ExportGPO Backup folder

54
 GPO(2/2)
GPO
GPO

55
 2GPO(1/4)
1GPO
BaselineCompare/Merge

56
 2GPO(2/4)
GPOOK

57
 2GPO(3/4)
Compare Baselines2GPO
Merge Baselines

58
 2GPO(4/4)
GPOOK

59
 GPO(1/2)
GPOAdvanced
View

60
 GPO(2/2)

61

 (1/5)
gpedit.msc

63
 (2/5)
Windows
Internet Explorer

64
 (3/5)

65
 (4/5)

(member.nat.gov.tw)
2

1 2

3
66
 (5/5)
cmd.exegpupdate /force

67

Demo


69



71