RE: Scripted IPSec policies on Windows XP (without AD/GPOs)

You should look into netsh.exe. Netsh is the command-line management tool
for all network configuration settings in Windows XP and Windows Server
2003.

> 1.) Is it possible either through the ?local? mmc based ?IP 
> Security Policy?
> or using another tool to export the given IPSec policy (for 
> importing elsewhere and/or using in a script)

You can certainly import and export a policy with the MMC snap-in to a
"policy file". I believe you can also import and export a policy using
netsh.

> 2.) Does anyone know of a way to script applying this IPSec 
> policy onto other/client PC?s (They?re all Windows XP SP2 boxes).

You can use netsh to script changes to IPSec. Adding a rule using netsh
would look something like this.

netsh ipsec static add filter filterlist="Outbound Filter" srcaddr=me
dstaddr=any description="HTTP out" protocol TCP srcport=0 dstport=80

A source port of 0 maps to any. 

See this article in Technet for a more complete reference of netsh.
http://tinyurl.com/amku6


---------------------------------------------------------------------------
---------------------------------------------------------------------------