Forum Discussion

Former Employee

Dec 06, 2022

Microsoft Security Compliance Toolkit 1.0 - Script File for 2012 R2

My customer is looking for the local script files for Microsoft Security Compliance Toolkit 1.0, which are missing. These are available on Windows 2016 up but not on Windows 2012 R2. If you can tell...

AaronMargosis_Tanium

Iron Contributor

Dec 06, 2022

Have to dig through the history and blog posts, but I think we first started publishing scripts sometime after we had already published the Windows 2012 R2 baseline, so there never were scripts for that baseline.

Haruko_N

Former Employee

Dec 06, 2022

Thank you, Aaron for your prompt response.

Haruko_N
Former Employee
Dec 06, 2022
Without local download scripts, how customer can download toolkit to Win 2012 R2? any recommendation?
- Haruko_N
  Former Employee
  Dec 06, 2022
  CSS team recommended download via GPO but customer replied that GPO is not an option since the installation is for a stand-alone server and not domain-joined server. Please see if there are other means of installing the baseline to Win 2012 R2?
  - AaronMargosis_Tanium
    Iron Contributor
    Dec 06, 2022
    Use the LGPO.exe tool with /g and the root path of the GPO you want to apply. GPOs\{631572F1-2CE9-481D-8FAB-A1553A4DBD56} is the Domain Controller baseline; GPOs\{AB1A03CA-A251-4FDC-9C95-3BFE14EF9A54} is the Member Server baseline. Optionally add /v to the LGPO.exe command line for verbose output.