Re: Windows 2000 SP2 local policy settings not stored using SIDs?

From: Tony Chow (xxx@XXX.COM)
Date: 08/20/01 

Message-ID:  <OE59pPix3j5lCj69bfA000105cf@hotmail.com>
Date:         Mon, 20 Aug 2001 07:53:58 -0700
From: Tony Chow <xxx@XXX.COM>
Subject:      Re: Windows 2000 SP2 local policy settings not stored using SIDs?
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

Yes, I have also observed that other convention used in security templates,
though they seem to be only used to describe ACLs.

The relationship of the security template to group policy objects is that,
quite simply, GPOs contain security templates. Inside of every GPO for
which "Security Settings" have been configured, there is a file called
GPTTMPL.INF (it resides in
%sysvol%\domain\policies\GUID\machine\microsoft\windows nt\seceditm where
GUID is the identifier for the GPO). It's in exactly the same format as a
regular security template. When you choose to import a template into a GPO,
the contents of that file are copied verbatim to GPTTMPL.INF. This file is
replicated to all domain controllers via File Replication Service.

============================================================================
Delivery co-sponsored by Trend Micro, Inc.
============================================================================
TREND MICRO SCANMAIL FOR EXCHANGE 2000 -- SECOND to NONE

If you are worried about email viruses, you need Trend Micro ScanMail for
Exchange. ScanMail is the first antivirus solution that seamlessly
integrates with the Microsoft Exchange 2000 virus-scanning API 2.0. ScanMail
ensures 100% inbound and outbound email virus scanning and provides remote
software management. Download a FREE 30-day trial copy of ScanMail and find
out why it is the best:
http://www.antivirus.com/banners/tracking.asp?si=8&BI;=240&UL;=/smex2000
============================================================================

Relevant Pages

  • 2003 Security Guide
    ... I'm using the Security templates in the Security guide in a LAB setup and i'm ... When i create a GPO that includes only the Enterprise Domain Controller ... template and link it to the Domian Controllers OU i cannot access members ...
    (microsoft.public.windows.server.security)
  • Re: XP lockdwon according to National Security Standards - GPO???
    ... so I got this .ini file with the settings that the corp wants put in ... gpo as well and apply that, then will the pc get all the settings? ... > If they have security templates then you can ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group policy creation
    ... In my setup for example, I find them in c:\winnt\sysvol\system.adm, ... If I call Save on the instantiated GPO, will the GPO come into effect in all ... I find the adm files in a path like this ... > Is there a way to do this programatically and import MS security templates ...
    (microsoft.public.win2000.security)
  • Group policy creation
    ... Through our SW installation, I need to create a new GPO and link it to ... I couldn't get a clear description about IGroupPolicyObject. ... Is there a way to do this programatically and import MS security templates ...
    (comp.security.misc)
  • Group policy creation
    ... Through our SW installation, I need to create a new GPO and link it to ... I couldn't get a clear description about IGroupPolicyObject. ... Is there a way to do this programatically and import MS security templates ...
    (microsoft.public.win2000.security)