Kurzbeschreibung;

Monitor the Security Compliance State of Your IT Environment for Computers Running Windows
The toolkit provides best practices from Microsoft about how to plan, deploy, monitor, and remediate a security baseline. The toolkit includes 12 Configuration Packs that you can use with the desired configuration management (DCM) feature in Microsoft® System Center Configuration Manager 2007 to monitor Windows Vista®, Windows® XP Service Pack 2 (SP2), and Windows Server® 2003 SP2.

Download findet sich [1] hier.

Eine deutsche Beschreibung habe ich [2] hier gefunden.

Auf TechNet findet sich [3] hier eine Seite zum Thema Security Compliance Management.

Um Gruppenrichtlinien mit MS Mitteln zu deployen, kann man den [4] GPO Accelerator nutzen

Kurzbeschreibung:

The GPOAccelerator creates all the Group Policy objects (GPOs) that you need to deploy recommended security settings for your environment to save you hours of work that you would otherwise need to configure these settings. This Solution Accelerator includes guidance to assist you with this tool.