Re: Security templates

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 04/30/04 

Date: Fri, 30 Apr 2004 00:05:07 GMT

You can import templates into a GPO. Be very careful and test out templates ahead of
time - particularly in regard to digitally sign communications, lan manager
authentication level, additional restrictions for anonymous connections, and ipsec
policy. If you want to apply to all computers in the domain I suggest that you create
a new GPO in the domain container for just that purpose rather than importing it into
the default domain GPO. That will make it much easier to blackout if need be. Put the
new GPO at the top of the list and configure "no override" on it if you want to make
sure all domain computers [including domain controllers] have those settings applied
to them. I would read the links below before proceeding. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;823659
http://www.microsoft.com/technet/Security/prodtech/win2000/win2khg/05sconfg.mspx

"Chris Hall" <chris.hall@securityfederalbank.com> wrote in message
news:OHAXvweLEHA.3052@TK2MSFTNGP12.phx.gbl...
> Can someone tell me how to apply security templates to all PCs in a domain?
> We have one domain, with multiple OUs.
>
>

Relevant Pages

  • Re: WSUS - Adding wuau.adm template???
    ... I find that using a GPO at the OU level that only covers client ... In Group Policy Object Editor, ... click Add/Remove Templates. ...
    (microsoft.public.windows.group_policy)
  • Re: Cant get Offfice 2007 GP to "take"
    ... User GPO Settings need to be linked to the OU or parent OU where the users ... In the Office 2003 GPO in User Configuration ... The ones with Office 2003 get the Workgroup Templates setting. ...
    (microsoft.public.windows.server.sbs)
  • Re: Cant get Offfice 2007 GP to "take"
    ... I had no settings defined in the Computer Configuration section of the ... GPO, they were all defined in the User Configuration section. ... The ones with Office 2003 get the Workgroup Templates setting. ...
    (microsoft.public.windows.server.sbs)
  • Re: Cant get Offfice 2007 GP to "take"
    ... I had no settings defined in the Computer Configuration section of the ... GPO, they were all defined in the User Configuration section. ... The ones with Office 2003 get the Workgroup Templates setting. ...
    (microsoft.public.windows.server.sbs)
  • Re: Cant get Offfice 2007 GP to "take"
    ... You're applying policies to them using the 2003 and 2007 ADM templates, each configured with the same settings for the shared template path, but the 2007 machines are not getting the shared path setting from the GPO? ... Unless we're both missing something obvious, it seems like you have a more generic problem with group policy, rather than a misconfiguration. ...
    (microsoft.public.windows.server.sbs)