Basic question here: I'm looking for a tool that scans and reports on the security settings on server. I'm familiar with secedit but the report was difficult to read. The SCM now has a compare feature but it's inconsistent and the reporting leaves alot to be desired. GPRESULT & RSOP only shows the settings that have been altered from the defaults via GPO. Is there something that is like RSOP but does a full report on the security settings regardless of whether it's set in GPO or locally? Jason Yates

Hello, for security scan you can use MBSA. For applied settings, you have to rsop or gpresult. I don't know other tools. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified IT Professional: Enterprise Administrator

Yeah, I'm familiar with those already. Those tools are close but not exactly what I'm looking for. Thanks.Jason Yates

Hi Jason, You can try to use Group Policy Results wizard in Group Policy Management Console. 1. Go to Start -> Run, type GPMC.MSC, it will load the GPMC console 2. On the left pane, right click on "Group Policy Results" and choose wizard to generate a report for the server. (Choose computer and select the properly user in the wizard). Note: You may need to disable the firewall on the target server temporarily to generate this report. Hope this helps. Regards, Bruce This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.