Customzing Security Template Files

I am working with a client who is setting up a new AD forest/domain and
we're working on putting together some baseline group policy objects to help
lock down member server configurations.

I've been using the Windows Server 2003 Security Guide as a reference and
tested some of the included security templates, but there are some things
I'd like to customize in the templates. The biggest concern is
adding/removing services to the "System Services" section of a particular
security template.

Removing services from a template appears to be simple enough--just comment
out the service you don't want from the INF file before you import it.
However, adding a new service seems a bit complicated. I can't seem to find
any reference for the syntax of the lines in the "Service General Setting"
section that define what services are included in the INF file.

Where can I find some definitive reference information about the syntax and
how to customize the services section of security template INF files?

Thanks,

Shawn Hansen



.

Relevant Pages

  • Re: Customzing Security Template Files
    ... Microsoft MVP (Windows Server: Security) ... > out the service you don't want from the INF file before you import it. ... > any reference for the syntax of the lines in the "Service General Setting" ... > how to customize the services section of security template INF files? ...
    (microsoft.public.security)
  • Re: Customzing Security Template Files
    ... When configuring a service using the Security Template snapin, ... ramifications of configuring specific permissions on a service versus not ... >> out the service you don't want from the INF file before you import it. ...
    (microsoft.public.security)
  • RE: Using Notepad To Add Registry Key/Value Pairs To Security Template .inf Files
    ... Thank you for your posting. ... you want to know the syntax of adding registry ... values to security template. ... 214752 How to Add Custom Registry Settings to Security Configuration Editor ...
    (microsoft.public.win2000.security)
  • Re: Corresponding registy for security option ?
    ... "Steven L Umbach" wrote: ... Then define every entry in that template either enabled ... > registry entries in the order they are listed in the security template. ... > security template is just a user friendly version of the .inf file when ...
    (microsoft.public.win2000.security)