Re: Customzing Security Template Files

I have only seen lines with three fields.
The service name, the state, and the ACLing
I assume you are not having issue with the first two of these.
The last is a standard SDDL syntax statement of DACL+SACL
http://msdn.microsoft.com/library/en-us/security/security/security_descriptor_string_format.asp
You may find getsid.exe from support tools of use if you are not
granting/denying well-knows principals.

--
Roger Abell
Microsoft MVP (Windows Server : Security)
MCDBA, MCSE W2k3+W2k+Nt4
"Shawn Hansen" <junk@xxxxxxxx> wrote in message
news:uBfDLr0%23FHA.1676@xxxxxxxxxxxxxxxxxxxxxxx
>I am working with a client who is setting up a new AD forest/domain and
> we're working on putting together some baseline group policy objects to
> help
> lock down member server configurations.
>
> I've been using the Windows Server 2003 Security Guide as a reference and
> tested some of the included security templates, but there are some things
> I'd like to customize in the templates. The biggest concern is
> adding/removing services to the "System Services" section of a particular
> security template.
>
> Removing services from a template appears to be simple enough--just
> comment
> out the service you don't want from the INF file before you import it.
> However, adding a new service seems a bit complicated. I can't seem to
> find
> any reference for the syntax of the lines in the "Service General Setting"
> section that define what services are included in the INF file.
>
> Where can I find some definitive reference information about the syntax
> and
> how to customize the services section of security template INF files?
>
> Thanks,
>
> Shawn Hansen
>
>
>


.

Relevant Pages

  • Customzing Security Template Files
    ... out the service you don't want from the INF file before you import it. ... any reference for the syntax of the lines in the "Service General Setting" ... how to customize the services section of security template INF files? ...
    (microsoft.public.security)
  • Re: Customzing Security Template Files
    ... When configuring a service using the Security Template snapin, ... ramifications of configuring specific permissions on a service versus not ... >> out the service you don't want from the INF file before you import it. ...
    (microsoft.public.security)
  • Re: Corresponding registy for security option ?
    ... "Steven L Umbach" wrote: ... Then define every entry in that template either enabled ... > registry entries in the order they are listed in the security template. ... > security template is just a user friendly version of the .inf file when ...
    (microsoft.public.win2000.security)