Abstract: With the research of desktop core security configuration standard and the function demand of desktop configuration management system, this paper proposes a system of desktop security baseline management based on the Microsoft’s baselines, in the background of the security operation management of large enterprises servers. This system consists of the baseline management console and the client service, can customize baselines, distribute and deploy baselines, discover the non-compliance configurations, inquire the baselines’ information. It provides a unified configuration management and monitoring platform for enterprises and institutions to implement the security configuration management.


Key words: desktop security configuration, security baseline, configuration management system