JSI Tip 9353. How do I view the changes made when I use SCW (Security Configuration Wizard) to apply a policy?

When you use the SCW (Security Configuration Wizard) to apply a policy, a change log is created at %SystemRoot%\security\msscw\ChangeConfigurationLogs.

To view the contents of the change log, use the scwcmd.exe command-line program:

1. Open a CMD.EXE window.

2. Type scwcmd view /x:%SystemRoot%\security\msscw\ChangeConfigurationLogs\<FileName>.xml and press Enter.

Example:

scwcmd view /x:%SystemRoot%\security\msscw\ChangeConfigurationLogs\AnalysisLog1.xml

NOTE: See How do I install SCW (Security Configuration Wizard) after installing SP1 (Service Pack 1) on Windows Server 2003?