Microsoft Security Compliance Manager 4.0 now available for download

The Security Compliance Manager (SCM) 4.0 is now available for download. This version of SCM supports Windows 10, and Windows Server 2016.

Download Security Compliance Manager 4.0
For a full description of the system requirements, install instructions and the download links, see: Download the SCM 4.0 from the Microsoft Download Center. Once you click on the "Download" button, you will be prompted to select the files you need. Download the files most appropriate for you.

Overview
Security Compliance Manager 4.0 (SCM 4.0) is a free tool from the Microsoft Solution Accelerator team that enables you to quickly configure and manage your desktops, traditional datacenter, and private cloud using Group Policy and System Center Configuration Manager. In addition to key features from the previous version, SCM 4.0 offers new baselines for Windows 10, and Windows Server 2016.

SCM 4.0 updates include:

• Support for existing Windows 10 version 1507, and Windows 10 version 1511 security baselines
• Support for upcoming Windows 10 version 1607, and Windows Server 2016
• Bug fixes for ‘Compare’ and ‘Simple View’ features in SCM

Key features include:
Here are key features of SCM 4.0:

Gold master support: Import and take advantage of your existing Group Policy.
Configure stand-alone machines: Deploy your configurations to non-domain joined computers using the GPO Pack feature.

Updated security guidance: Take advantage of the deep security expertise and best practices in the updated security guides and the attack surface reference workbooks to help reduce the security risks that you consider to be the most important.

Centralized Management of Your Baseline Portfolio: The centralized management console of the Security Compliance Manager provides you with a unified, end-to-end user experience to plan, customize, and export security baselines. The tool gives you full access to a complete portfolio of recommended baselines for Windows client and server operating systems, and Microsoft applications. The Security Compliance Manager also enables you to quickly update the latest Microsoft baseline releases and take advantage of baseline version control.

Security Baseline Customization : Customizing, comparing, merging, and reviewing your baselines policy configurations just got easier. Use the customization capabilities of the Security Compliance Manager to duplicate any of the recommended baselines from Microsoft and quickly modify security settings to meet the standards of your organization’s environment.

Multiple Export Capabilities: Export baselines in formats like Group Policy objects (GPOs), Desired Configuration Management (DCM) packs, or Security Content Automation Protocol (SCAP) to enable automation of deployment and monitoring baseline compliance.

Available policy configuration baselines include Windows Server 2012, Windows Server 2008 R2 SP1, Windows Server 2008 SP2, Windows Server 2003 SP2, Hyper-V, Windows 8, Windows 7 SP1, Windows Vista SP2, Windows XP SP3, BitLocker Drive Encryption, Windows Internet Explorer 10, Windows Internet Explorer 9, Windows Internet Explorer 8, Microsoft Office 2010 SP1, Microsoft Office 2007 SP2, Exchange Server 2010 SP2 and Exchange Server 2007 SP3.

For more details about Microsoft Security Compliance Manager 4.0 visit Security Compliance Manager (SCM) website.

System requirements

• Supported operating systems: Windows 10 , Windows 7, Windows 8

Microsoft Word or Microsoft Word Viewer (available as a free download) can be used to view Word documents.

References:
Security Compliance Manager: Release Notes
TN: Microsoft Security Guidance