This demonstration will show you how to create your own custom compliance packs to import into ConfigMgr 2012/R2.
- First, download and install the Microsoft Security Compliance Manager (SCM) solution accelerator. Note that this can be easily from your workstation computer, it does not need to be on a Windows Server. Also, a version of SQL (including the Express edition) needs to be installed locally as a prerequisite. http://technet.microsoft.com/en-us/solutionaccelerators/cc835245.aspx
- When SCM has been launched for the first time, it will check for, download, and import baselines.
- However, newer baselines will still be missing. Select the option to download baselines automatically.
- From the available products and baseline options, multi-select the desired configuration items, then export to SCCM DCM 2007 (.cab) –even for ConfigMgr 2012/R2!
- Next, store/save a copy of the .cab file where it can be easily imported into ConfigMgr. If you’ve made a “complex” DCM, then I recommend ensuring that you’ve either created instructions on how to rebuild the cab, or retain/backup the original file.
- In the ConfigMgr console for Compliance Settings > Configuration Items, select to Import Configuration Data.
- In the wizard, click the Add button to include the baseline(s) that have been created and are ready for import. Then complete the remainder of the wizard.
- Note that with the imported configuration data, the baseline(s) are automatically created as well.
- Finally, deploy the baseline(s) to the desired collection of systems.
And that’s all there is to quickly using SCM for creating your own compliance packs for ConfigMgr 2012/R2!