Re: security policy 'not specified' option

From: Thor (Hammer of God) (thor_at_hammerofgod.com)
Date: 10/21/05

  • Next message: Jeff Pancrazio: "RE: Change Password" 
    To: "Alexander Suhovey" <asuhovey@mtu-net.ru>, <focus-ms@securityfocus.com>
Date: Fri, 21 Oct 2005 12:07:08 -0700

    > For this you can use Security Templates MMC snap-in to create a policy
    > template (inf file). You can also export current policy using secedit.exe
    > command line tool. Then distribute it to your client computers. You can:
    > - import template using secpol.msc MMC snap-in
    > - apply template using Security Configuration and Analysis snap-in
    > - apply template using secedit.exe

    I would throw in the "Resultant Set of Policy" mmc into there as well, along
    with the "pgresult" command. In private email with Matthew, it became a bit
    more apparent what I thought his issues were- my guess is some GPO
    application issues-- these tools are great for troubleshooting GPO
    troubleshooting.

    t

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Jeff Pancrazio: "RE: Change Password"

    Relevant Pages

    • Re: security template file import
      ... one of the more "well documented" features of the GPO based security policy. ... modify the security template - ...
      (microsoft.public.win2000.security)
    • Re: Security templates and IUSR account log on locally
      ... the Enterprise security template for Member Servers breaks IIS6 anon ... the guideline is to apply the member servers baseline policy and then the ... web servers policy. ... You may also want to revisit the download for the W2k3 Security Guide as ...
      (microsoft.public.inetserver.iis.security)
    • Re: Security templates and IUSR account log on locally
      ... the Enterprise security template for Member Servers breaks IIS6 anon ... the guideline is to apply the member servers baseline policy and then the ... web servers policy. ... You may also want to revisit the download for the W2k3 Security Guide as ...
      (microsoft.public.inetserver.iis.security)
    • Re: Administrative Templates not showing registry entries
      ... "Mathieu CHATEAU" wrote: ... Click on administrative template, then View / Filtering ... POLICY!!OpLocksForceClose ... OpLocksForceClose="Turn On Force Close feature of OpLocks" ...
      (microsoft.public.windows.server.active_directory)
    • Re: Applying Custom Security Templates with GPOs
      ... The template (and, therefore, policy) is not being ... privliges to apply the GPO. ... >servers need to reside in that OU or possibly a sub OU. ...
      (microsoft.public.win2000.security)