Forum Discussion

Former Employee

Dec 06, 2022

Microsoft Security Compliance Toolkit 1.0 - Script File for 2012 R2

My customer is looking for the local script files for Microsoft Security Compliance Toolkit 1.0, which are missing. These are available on Windows 2016 up but not on Windows 2012 R2. If you can tell...

Haruko_N

Former Employee

Dec 06, 2022

Thank you, Aaron for your prompt response.

Haruko_N

Former Employee

Dec 06, 2022

Without local download scripts, how customer can download toolkit to Win 2012 R2? any recommendation?

Haruko_N
Former Employee
Dec 06, 2022
CSS team recommended download via GPO but customer replied that GPO is not an option since the installation is for a stand-alone server and not domain-joined server. Please see if there are other means of installing the baseline to Win 2012 R2?
- AaronMargosis_Tanium
  Iron Contributor
  Dec 06, 2022
  Use the LGPO.exe tool with /g and the root path of the GPO you want to apply. GPOs\{631572F1-2CE9-481D-8FAB-A1553A4DBD56} is the Domain Controller baseline; GPOs\{AB1A03CA-A251-4FDC-9C95-3BFE14EF9A54} is the Member Server baseline. Optionally add /v to the LGPO.exe command line for verbose output.
  - Xuefeng_L
    Microsoft
    Dec 07, 2022
    Hi Aaron, the customer said that their target server is a stand-alone server. Not a domain controller nor joined to domain.
    
    I recognized that the following policy should be applied based on the above assumption, is this correct?
    GPOs\{AB1A03CA-A251-4FDC-9C95-3BFE14EF9A54}
    
    GPOs\{AB1A03CA-A251-4FDC-9C95-3BFE14EF9A54}