MZ@ !L!This program cannot be run in DOS mode. $Rؕ3}3}3}H̴3}H̱3}Rich3}PEL!  D` @C.rsrcPD@@P0H  8Pfh 0@Xd&t9 ;X= ?$AC>D $PMUI!XR6)#-VtfӢ Y MUI zh-CNh [hQMnT[(SCW)v}TNLeEQ0 l: scwcmd [analyze | configure | register | rollback | transform | view ] y \ SCW ubv[hQV{eu^(u0R{:g0_NcS{:gRh\O:NeQ0 l: scwcmd configure [[[/m:machine | /ou:ou] /p:policy] | /i:machinelist] [/u:username] [/pw:password] [/t:threads] /m:machine c[Mnv{:gv NetBIOS T y0DNS Tyb IP 0W@W0 Ygc[ /m R_{ Tec[ /p0 /ou:ou c[ Active Directory -NvN*N OU v[hQ P[vW T(FQDN)0Ygc[N /ou R_{ Tec[ /p0@b g OU -Nv{:g\ c~[ V{euۏLMn0 /p:policy c[^(uv xml V{eueNv _TeN T0 /i:machinelist c[N*N xml eNv_TeN T 勇eN S+T{:gRh NS[NBlvV{eueN0 V{eueN\^(u0Rv^v{:g0S %windir%\security\msscw\kbs\SampleMachineList.xml /u:username (WgbL܏ zMnec[N*NY(uv(u7bQnc0؞:N ]{vU_v(u7b0 /pw:password (WgbL܏ zMnec[N*NY(uv(u7bQnc0؞:N ]{vU_v(u7b0 /t:threads c[(WMnǏ z-N^Ocv Te*g[bvMn d\Opev0 (؞f:y Ty0_{c[dkSpe0 :yO: scwcmd transform /p:FileServerPolicy.xml /g:FileServerSecurity # nx[{:g/f&TnV{euBl0~g\(WN*N XML eN-NԏV0_NcS{:gRh\O:NeQ0傁(W`OvOmȉhV-Ng wRg~g O(u scwcmd view v^c[ %windir%\security\msscw\TransformFiles\scwanalysis.xsl \O:N XSL lbc0 l: scwcmd analyze [[[/m:machine | /ou:ou] /p:policy] | /i:machinelist] [/o:resultdir] [/u:username] [/pw:password] [/t:threads] [/l] [/e] /m:machine c[Rgv{:g v NetBIOS Ty0DNS Tyb IP 0W@W0 Ygc[ /m R_{ Tec[ /p0 /ou:ou c[ Active Directory -NvN*N OU v[hQ P[vW T(FQDN)0Ygc[N /ou R_{ Tec[ /p0@b g OU -Nv{:g\9hnc~[ V{euۏLRg0 /p:policy c[(ueggbLRgv xml V{eueNv_ TeN T0 /i:machinelist c[N*N xml eNv_TeN T 勇eN S+T{:gRh NS[NBlvV{eueN0 @b g xml eN-Nv{:g\9hncv^V{eu eNۏLRg0 S %windir%\security\SampleMachineList.xml /o:resultdir c[lPRg~geNv_TvU_0؞:N S_MRvU_0 /u:username (W܏ z{:g NgbLRgec[N*NY(uv (u7bQnc0 ؞:N]{vU_v(u7b0 /pw:password (W܏ z{:g NgbLRgec[N*NY(uv (u7bQnc0 ؞:N]{vU_v(u7b0 /t:threads c[(WRgǏ z-N^Ocv Te*g[bv Rgd\Opev0 (؞f:yN*N xml eN0dk}TN[O(u N TƉV>f:y SCW xml eN_ g(uY0 l: scwcmd view [/x:xmlfile] [/s:xslfile] /x:xmlfile c[g wv xml eN0_{c[dkSpe0 /s:xslfile c[\O:N>f:yd\OvNR^(u0R xml eNv xsl lbc0dkSpe[ SCW xml eN/fS v0 (WO(u view }TN>f:y SCW xml eNe [\ ꁨR\Ջ[c[v xml eNR}cknxv؞lbc0 Ygc[NN*N XSL lbc Rdklbc_{GP[ XML eN_{Ndk XSL lbc,g(W TNvU_-N0 :yO: scwcmd view /x:C:\policies\policyfile.xml /s:C:\viewers\policyview.xslP ^(ugяvS(uVnV{eu 6qT RdVnV{eu0 l: scwcmd rollback /m:machine [/u:username] [/pw:password] /m:machine c[^gbLVnd\Ov{:gv NetBIOS Ty0DNS Ty b IP 0W@W0 /u:username gbL܏ zVnec[N*NY(uv(u7bQnc0؞:N ]{vU_v(u7b0 /pw:password gbL܏ zVnec[N*NY(uv(u7bQnc0؞:N ]{vU_v(u7b0 Example: scwcmd rollback /m:123.123.123.123 A ibU\bꁚ[IN SCW v[hQMnpenc^ ُǏlQN*NS+T҉r0NR0 gRbzS[INv[hQMnpenc^eNeg[b0 l: scwcmd register /kbName:MyApp [/kbfile:kb.xml] [/kb:path] [/d] /kbname:Myapp c[[hQMnpenc^ibU\lQO(uv Ty0 _{c[dkSpe0 /kbfile:kb.xml c[(uegibU\bꁚ[IN SCW v[hQMn penc^v[hQMnpenc^eNv_TeN T0 傁nx[hQMnpenc^eNN SCW gg|Q[ O(u %windir%\security\KBRegistrationInfo.xsd gg[INeN0 _{cOdk y d^c[N /d Spe0 /kb:path c[fev SCW [hQMnpenc^eNv _0Ygl gc[dk y \O(u %windir%\security\msscw\kbs0 /d N[hQMnpenc^lN*N[hQMnpenc^ ibU\0Ǐ /kbname Speegc[lv ibU\( N^c[ /kbfile Spe)0Ǐ /kb Speegc[ N-Nlv[hQMnpenc^0 :yO: scwcmd register /kbfile:d:\SCWKBForMyApp.xml /kbname:MyApp /kb:\\kbserver\kb scwcmd register /d /kbname:MyApp /kb:\\kbserver\kb gbLlQ1Y%gbLl1Y% }TN]bR[b0 !}TN][b0hgkS{:g Nve_eNNS~vr`Oo`0 }TN][bFO g0 -hgN NvU_ Nve_eN: %windir%\security\msscw\Logs 6elube_eN: %windir%\security\msscw\logs\scwcmdlog.xml S[xeQ S OU Oo`eQ S{:gRhOo`eQ SfYQX[eQYt~ z`leQ {:gv[bNx: %1eQ[x:CoInitialize 1Y% elR^~V{eu[a LDAP Sb_}TN1Y% LDAP ~[}TN1Y% LDAP d"}}TN1Y% elS LDAP y elS LDAP

PAelR^ SSRCore COM [aelS SSRCore _dcSelS ActionDataelS ActionData cSelS SsrEngine cS elS XML Q:Sel\ XML V{eu O0R_d_d*ggbLlbc ~b N0R[hQibU\eN elTv^ INF eNelub!jg0g w %1 NN~Oo`elh"}~V{eu[av SYSVOL eN_ elR^vU_: %1 elR^eN: %1elOX[~V{euPA~geN: %1~gvU_: %1wQ g@bcOv>f:y Tyv GPO X[(W5 gsQdkd\OvOo` Svh{:g Nv NRvU_: %windir%\security\msscw\LogseV{euelۏLlbc SV/f[S+T Windows 2kpXvn Windows 2kpX gR*g/T(u0lbc Windows 2kpXn (WlbcǏ z-N,g0W{:g N_{ЏL Windows 2kpX gR0 e_eN: %1e_vU_: %1elR} XML eN: %1 eN %1 NX[(W N/ecv XML eN{|WPAWindows [hQMnT[ SCW ܏ z2kpXĉR  Scshost - R` RPC#AQO(uR` RPC TOS TCP [ scshost ۏLeQz%SCW ܏ z2kpXĉR  Scshost - ~~p RPC f\hV'AQO(u~~p RPC f\hVTOS TCP [ scshost ۏLeQzSCW ܏ z2kpXĉR  Svchost - TCP#AQO(uzS 135 TOS TCP [ svchost ۏLeQzSCW eQz2kpXĉR - |~ - TCP AQO(uzS 1390445 TOS TCP [|~ۏLeQzSCW ܏ z2kpXĉR - |~ - UDPAQO(uzS 137 TOS UDP [|~ۏLeQzPAWindows [hQMnT[~PA 00PPdo8xp ,1 678 _Y \Pbk  fJT Oo` hMicrosoft-Windows-Security-Configuration-Wizard pMicrosoft-Windows-Security-Configuration-Wizard/ʋe pMicrosoft-Windows-Security-Configuration-Wizard/d\O Yt/TRv gRkbc0 Yt[bv gRkbc0 Yt/TRvTv^0 Yt[bvTv^0 Yt/TRv҉r0 Yt[bv҉r0 Yt/TRvNR0 Yt[bvNR0 $Yt/TRv;mRWYcW[0 $Yt[bv;mRWYcW[0 $Yt/TRvꁚ[INR0 $Yt[bvꁚ[INR0 [8hibU\/TRvMn0 [8hibU\[bvMn0 [8hibU\/TRvVn0 [8hibU\[bvVn0 [8hibU\/TRvRg0 [8hibU\[bvRg0 [8hibU\/TRvlbc0 [8hibU\[bvlbc0  gRibU\/TRvMn0  gRibU\[bvMn0  gRibU\/TRvVn0  gRibU\[bvVn0  gRibU\/TRvRg0  gRibU\[bvRg0  gRibU\/TRvlbc0  gRibU\[bvlbc0 lQhibU\/TRvMn0 lQhibU\[bvMn0 lQhibU\/TRvVn0 lQhibU\[bvVn0 lQhibU\/TRvRg0 lQhibU\[bvRg0 lQhibU\/TRvlbc0 lQhibU\[bvlbc0 $SCE ibU\/TRvMn0 $SCE ibU\[bvMn0 $SCE ibU\/TRvVn0 $SCE ibU\[bvVn0 $SCE ibU\/TRvRg0 $SCE ibU\[bvRg0 $SCE ibU\/TRvlbc0 $SCE ibU\[bvlbc0 2kpXibU\/TRvMn0 2kpXibU\[bvMn0 2kpXibU\/TRvVn0 2kpXibU\[bvVn0 2kpXibU\/TRvRg0 2kpXibU\[bvRg0 2kpXibU\/TRvlbc0 2kpXibU\[bvlbc0 $SCW ]_Y/TR UI0 $SCW ][b/TR UI0 ,SCW g whV]_Y/TR UI0 ,SCW g whV][b/TR UI0 (SCW ]_YgbLyr[v}TN0 (SCW ][bgbLyr[v}TN0 8MnbR0%n%n gsQ~Oo` S %10 8Mn1Y%0%n%n gsQ~Oo` S %10 8VnbR0%n%n gsQ~Oo` S %10 8Vn1Y%0%n%n gsQ~Oo` S %10 \VnubbR0%n%nubvVneN:N %10%n%n gsQ~Oo` S %20 <Vnub1Y%0%n%n gsQ~Oo` S %10 \勡{:g N&{TRgv SCW V{eu0%n{:g Ty: %1 %nRgibU\: %2 x]gbL SCW Rgd\O FOyr[v SCW RgibU\*gbR[b0%n{:g Ty: %1 %nRgibU\: %2 4VS_VERSION_INFO@%@%?StringFileInfo080404B0LCompanyNameMicrosoft Corporation3FileDescriptionWindows Security Configuration Wizard Command Toolr)FileVersion6.3.9600.16384 (winblue_rtm.130821-1623)(InternalNameSCW.LegalCopyright Microsoft Corporation. All rights reserved.0OriginalFilenameSCWj%ProductNameMicrosoft Windows Operating SystemBProductVersion6.3.9600.16384DVarFileInfo$TranslationPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX