views:

17

answers:

0

I'd like to provide some background before I pose my question so please, bear with me.

I have come across Microsoft's Security Compliance Manager. It's rather new to me and as I understand so far, one can download EC (enterprise) or SSLF (specialized security, limited function) security "baseline" GPOs for implementation in Active Directory. The baselines are for XP, Win 7, Win 2k3, and 2k8.

GPOAccelerator can deploy or implement these baseline GPOs for a Domain or Locally.

And now for my question: Is there a tool that can compare GPOs that one sets to the GPOs from the SCM? I'm thinking of something along the lines of the MBSA tool. Does something like this exist?