Adding MSS Hardening Options for W2012 R2

[ZF]

1.
Download the Windows 7 Security Compliance Management Toolkit and install it. You can ignore the warning about the compatibility issue concerning MS SQL Express. It will run just fine.

2.
Run the LocalGPO.msi installer package that came with the SCM toolkit.

3.
Edit C:\Program Files (x86)\LocalGPO\LocalGPO.wsf and replace the following:


If(Left(strOpVer,3) = "6.3") and (strProductType <> "1") then
strOs = "WS12"
ElseIf(Left(strOpVer,3) = "6.2") and (strProductType <> "1") then
strOS = "WS12"
ElseIf(Left(strOpVer,3) = "6.2") and (strProductType = "1") then
strOS = "Win8"
ElseIf(Left(strOpVer,3) = "6.1") and (strProductType <> "1") then
strOS = "WS08R2"
ElseIf(Left(strOpVer,3) = "6.1") and (strProductType = "1") then
strOS = "Win7"
ElseIf(Left(strOpVer,3) = "6.0") and (strProductType <> "1") then
strOS = "WS08"
ElseIf(Left(strOpVer,3) = "6.0") and (strProductType = "1") then
strOS = "VISTA"
ElseIf(Left(strOpVer,3) = "5.2") and (strProductType <> "1") then
strOS = "WS03"
ElseIf(Left(strOpVer,3) = "5.2") and (strProductType = "1") then
strOS = "XP"
ElseIf(Left(strOpVer,3) = "5.1") and (strProductType = "1") then
strOS = "XP"
Else
strMessage = DisplayMessage(conLABEL_CODE002)
Call MsgBox(strMessage, vbOKOnly + vbCritical, strTitle)
Call CleanupandExit
End If

4. Save, open CMD with Admin Rights
cd C:\Program Files (x86)\LocalGPO
cscript LocalGPO.wsf /ConfigSCE

5. Start SCA and MMS should show up

SOURCE:http://blog.datencamp.org/2014/07/mss-gpo-mystery-solved-w2012r2/