Microsoft releases Security Configuration Wizard for ISA Server 2006

While still much perfectible, Security Configuration Wizard (SCW). almong with WSUS, is one of the best tool Microsoft ever made in its path towards enterprise security leadership.

I covered it before in Hardening Windows 2003 platforms made easy.

SCW has 2 big limits:

• it doesn't work on all Windows editions


• its roles cannot be updated with Windows Update or WSUS

This second limit obliges Microsoft to release a new version every time a new backend plaftorm is out, but since this process seems pretty time consuming it happens only when a critical product is released.

It's the case of the new ISA Server 2006, for which Microsoft silently published an updated SCW on early August.

It works for both Standard and Enterprise edition and can be downloaded here.