Manually editing saved Security Configuration Wizard (SCW) XML fil

[Guest Chris]

Hey all. I generated an XML file from the SCW on a Windows 2003 R2 server.

The problem I have with this is that it doesn't seem to like anyone manually

modifying the file afterwards. If you manipulate or hack out items or

services you do not want to touch (i.e. ), the SCW interface chokes on it when you try and

edit the file again, says something about the file not being an SCW file.

 

Basically what I want is a generic template that manipulates 10-15 services,

adds few registry keys, etc. If I manually hack out all the stuff I do not

want and add the stuff I do (registry keys) without corrupting the XML

format, can I still apply this template using SWCMD.EXE or will it too think

it is corrupt?

 

I think SCW is pretty much a POS in that you can't exclude services, or

you're basically stuck with Disabled or Automatic as there aren't any options

to set it to Manual or just leave it configured as is. There isn't any

fine-tuning options available.

 

Anyone else got any experience modifying these files?