Re: W2K Security Templates

From: Laura A. Robinson (larobins@bellatlantic.net)
Date: 09/22/01 

Message-ID: <009601c1431f$d4b95f10$0a00010a@lauradominion.com>
From: "Laura A. Robinson" <larobins@bellatlantic.net>
To: "None None" <somedays123@hotmail.com>, <focus-ms@securityfocus.com>
Subject: Re: W2K Security Templates
Date: Sat, 22 Sep 2001 00:34:12 -0400

Without knowing what settings were in the template, perhaps the easiest way
to clean the machine up would be to join it to the domain, use Group Policy
to deploy basicsv.inf to the server, then, while it is still in the domain
and affected by GP, go in and manually reset the local policy settings.

Laura
----- Original Message -----
From: "None None" <somedays123@hotmail.com>
To: <focus-ms@securityfocus.com>
Sent: Thursday, September 20, 2001 4:08 PM
Subject: W2K Security Templates

> Folks,
>
> Has anyone run across this with W2K Security Templates, it does not appear
> to be addressed on MS's site or any readily available documentation:
>
> A Windows 2000 Security template was created on a W2K Advanced server that
> was part of a domain. That template was then applied to a W2K stand alone
> server (not part of a domain). Services on the template were set so that
> some services were DISABLED (telephony for example) and some were set to
> MANUAL, with EVERYONE as the group with security rights assigned (service
> dependencies are not the issue). Now that the template has been applied,
the
> services are not accessible. This means you are not able to start/stop or
> change the default state of the service. Trying to do so simply hangs
> SERVICES.EXE. We tried to apply a new template without specifying anything
> in the services area, no luck. Even a "SECEDIT /configure /DB filename
/CFG
> filename /overwrite" does not work. As the configuration reaches the
> services section it simply hangs and the new template does not get
applied.
>
> Anyone have a clue why we can remove the template and get back to
> configuring the services?
>
> Thanks,
>
> SD
>
> _________________________________________________________________
> Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
>

Relevant Pages

  • Re: DHCP Client service unable to start - access denied
    ... > basicsrv.inf template since you could compare to the default settings. ... > may be worth a try is to use netsh to reset tcp/ip on your W2003 Server as ... > Windows 2003 Server ...
    (microsoft.public.windows.server.security)
  • Re: Comparing Two Security Templates??
    ... server to be able to import a second template to compare. ... > Configuration and analysis. ... >>settings, registry settings and file permissions that we ...
    (microsoft.public.win2000.security)
  • Comparing Two Security Templates??
    ... if I go into the sec config tool how can I save the current server ... If I use Export Template only the database is exported ... settings, registry settings and file permissions that we needed but when I ...
    (microsoft.public.win2000.security)
  • Re: Baseline lockdown for stand-alone server
    ... If you apply the template then you do not have to apply the settings ... refer to the Windows 2003 Server Security Guide for specific definitions and ... For a stand alone server pay particular attention to lan ...
    (microsoft.public.security)
  • Re: Question for Roger Abell
    ... closing MMC after saving the template? ... I have not seen the fail to save of a template issue for some time ... Security Templates and Security Configuration and Analysis snap-ins ... If so, have they been fixed only for Windows XP, or have they ...
    (microsoft.public.win2000.security)