newbie: .inf & group policies

From: bruce (badIII@yahoo.com)
Date: 09/04/02 

From: bruce <badIII@yahoo.com>
Date: Wed, 04 Sep 2002 11:57:49 -0700

we're getting ready to migrate from an NT domain to win2k AD. we
currently use NT policies to restrict access. I'm trying to get up to
speed on win2k group policies and .inf files. I'm hoping someone can help
me out w/ answers or pointers to where I can find answers to the
following:

1. where can I find documentation on the format of the security .inf
files? I've been looking at the CIS win2k security baseline & would like
to know what "%SystemDrive%\IO.SYS",2,"D:PAR(A;;FA;;;BA)(A;;FA;;;SY)"
means. I can figure out that this grants Full Access to io.sys for the
Built-in admin & system account, but what about the 2, the D:PAR etc.
Where can I get more info on this?

2. How can I restrict access to control panel and snap-in modules through
group policies?

3. Once I create my Security settings, how can I export them? There is an
Export Settings right below Import Settings, but it is always grayed out.

4. Is there a way to save the whole group policy before I start making
changes it so I have the original, default settings?

TIA

Relevant Pages

  • Internet Cafe
    ... I want to use Win2k ... on the workstations and "cripple" it using the policies it has, ... hardly any idea on how secure the win2k policies are... ... I'm thinking it should be reasonably secure, ...
    (Security-Basics)
  • 2K TS with No Active Directory
    ... We just got a new client who has a win2k TS server running without AD. ... How can we apply policies to the local users? ...
    (microsoft.public.windows.terminal_services)
  • GPOs for dummies...anyone have a list of the location of each policy?
    ... That is, an alphabetical list of all policies, and where it's located ... in the GPO. ... I'm specifically interested in Win2k, but we'll be upgrading to 2003 ...
    (microsoft.public.win2000.group_policy)