\nTransforms an SCW generated security policy into files that can be deployed via group policy. The transform operation does not change any settings on the server where it is performed. The transform operation creates a Group Policy Object (GPO) in Active Directory and copies the transformed files into that GPO. After the transform operation has successfully completed, an administrator must link the GPO to the desired OU(s) in order to have the policy deployed to servers.
\n
\nWarnings:
\n1. IIS Settings are not deployable via group policy.
\n2. The transform operation should be performed as a domain administrator.
\n3. Firewall policies that list approved applications should not be deployed to servers unless the Windows Firewall service started automatically when the server was last started.
\nDetermines whether a machine is in compliance with a policy. Results are returned in an XML file. Also accepts a list of machines as input. To view the analysis results in your browser, use `scwcmd view' and specify %windir%\security\msscw\TransformFiles\scwanalysis.xsl as the XSL transform.
\n/m:machine Specifies the NetBIOS Name, DNS Name or IP Address of a
\n machine where the rollback operation should be performed.
\n
\n/u:username Specifies an alternate user credential to use when performing
\n a remote rollback. Default is the logged on user.
\n
\n/pw:password Specifies an alternate user credential to use when performing
\n a remote rollback. Default is the logged on user.
\n
\nExample:
\nscwcmd rollback /m:123.123.123.123
\n
\n
\n
7007
\n
\nExtends or customizes SCW's Security Configuration Database by registering a Security Configuration Database file that contains role, task, service, or port definitions.
7011 Command completed. Please check log file(s) on each machine for detailed status information.
\n
7012 Command completed with error.
\n
7013 Please check log file(s) under the following directory:\n%windir%\security\msscw\Logs
\n
7015 Failed to generate log file: %windir%\security\msscw\logs\scwcmdlog.xml
\n
7016 Error reading password
7017 Error getting OU information
7018 Error getting machine list information
7019 Error getting more memory
7020 Error processing thread pool
7021 Completion code for machine: %1
7022 Please enter the password:
7023 CoInitialize failed
7024 Cannot create Group Policy Object
7025 LDAP open command failed
7026 LDAP Bind command failed
7027 LDAP Search command failed
7028 Cannot read LDAP entry
7029 Cannot read LDAP value
7030 Cannot create a new Group Policy Object
7031 Cannot retrive Active Directory path for the Group Policy Object
7032 Cannot create XML DOM Object
7033 Cannot find File %1
7034 Cannot parse the XML buffer
7035 Cannot obtain root of XML document: %1
7036 Missing XML node: %1
7037 Missing XML attributes: %1
7038 Cannot iterate through XML node list
7039 Cannot manipulate XML attribute node: <%1>
7040 Cannot create SSRCore COM Object
7041 Cannot get SSRCore engine interface
7042 Cannot get ActionData
7043 Cannot get the ActionData interface
7044 Cannot get the SsrEngine interface
7045 Cannot get XML buffer
7046 Cannot pass the xml policy to the engine
7047 The engine failed to perform the transform
7049 Security extension files not found
7050 Cannot merge INF file
7051 Cannot generate template. Please check %1 for more information
7052 Cannot retrive SYSVOL file path for the Group Policy Object
7053 Cannot create directory: %1
7054 Cannot create file: %1
7055 Cannot save Group Policy
7056 Result file: %1
7057 Result directory: %1
7058 A GPO with the supplied display name exists
7059 For information about this operation please see the following directory on the target machine(s): %windir%\security\msscw\Logs
7060 The policy cannot be transformed because it contains settings for the Windows Firewall but the Windows Firewall service is not enabled. In order for Windows Firewall settings to be transformed, the Windows Firewall service must be running on the local machine during the transform operation.
