Hi

I would like to do automated scap checks for a Windows 7 Embedded SP0 (not SP1) 5-axisa mill, that i have rolled out windows 7 STIGS via group policy (local and domain). The system is barely usable before the STIGGING and would take hours to complete manually (just think, a mouse click takes about 2-3 seconds to respond). Scap compliance checker (public available versions) and Evaluate STIG do not run on windows 7 version that early. The only way i have managed to get some idea of what controls applied was by exporting the local GPO settings ont he Win 7 SP0 IPC and importing them on a Win 7 SP1 vm, and doing a SCC scan. The vendor of the 5-axs says there is no path for upgrading the OS.

Would there any way of running the scap checks on the systems itself that you could think of?

​