Microsoft Security Compliance Manager 2.5 was released today.
If you haven’t had a chance to look at this great tool, I highly recommend you do so. A problem I had for years was juggling all the security settings in active directory and in CM. Because a security baseline can have so many settings, trying to juggle them in a spreadsheet was hopeless.
But SCM lets you manage those settings in one spot, download the latest baselines from Microsoft, compare your settings to Microsoft’s, make notes on why you deviate from Microsoft’s settings, and lets you import and export to GPOs and CM baselines. And it works for CM12 too!