Updating the Default Security Baselines in Security Configuration Manager

Q: Can Microsoft Security Configuration Manager (SCM) automatically check for security baseline updates on the Microsoft website?

A: Yes, SCM can automatically check the Microsoft website for updates to the default Microsoft baselines. Default Microsoft baselines are automatically included when you first install SCM on your machine. By default, SCM automatically checks for baseline updates each time you start the tool. You can control SCM's update checking behavior from the Options menu item in SCM's File menu. When you open this menu item, you'll see that the Check for updates automatically at startup option is checked by default.

You can also manually check for updates to the default Microsoft baselines. To do so, use the Check for Updates option in SCM's File menu. For more information about using baselines in SCM, see "Adding Settings to Custom Security Baselines in Security Compliance Manager" and "Comparing Custom and Default Security Baselines in Security Compliance Manager."