Re: Template Build Shows SID, Not Name

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 05/21/04

  • Next message: Steven L Umbach: "Re: Search for 'Backdoor'" 
    Date: Fri, 21 May 2004 01:02:51 GMT

    When you create a local group it is assigned a sid specific to that machine and other
    machines will not be able to resolve the sid to a name because it will not exist on
    that computer. In a W2K domain you can specify domain groups and use Group Policy to
    manage security settings to a group of servers. In your situation you may need to
    modify the Local Security Policy on each computer to do what you wan to do. ---
    Steve

    "Tony Stark" <stark192@hotmail.com> wrote in message
    news:O$0K1YoPEHA.3748@TK2MSFTNGP09.phx.gbl...
    > Hello,
    >
    > I am creating a custom security template for Win2k and Win2k3 in an NT 4.0
    > domain, in the template I have defined a local group, L_Template for
    > example, where the global group will be placed into the local group so the
    > users in the global group will have access to do various things.
    >
    > The issue I have run into is that even though I create a L_Template group on
    > the server where I am going to apply the template I have found that after I
    > import and apply the template adn look at the permission settings in the
    > template all I see is the SID of the account where I careated the
    > template...
    >
    > How can I create a template that will allow me to specify a group that we
    > create that can perform certian actions and then use that template on other
    > servers and not see the SID but the actual account?
    >
    > Thank you!
    >
    > Tony
    >
    >
    >

  • Next message: Steven L Umbach: "Re: Search for 'Backdoor'"

    Relevant Pages

    • Re: Domain-wide Print Operators Group - not working?
      ... on all servers and workstations. ... What this means is that if a machine has to resolve the SID it will resolve it to the local machine. ... Print Operators is a local group, which means if you add someone to the domain group, it only applies to domain controllers. ... You need to use the local group for member servers. ...
      (microsoft.public.windows.server.active_directory)
    • Re: Template Build Shows SID, Not Name
      ... users for every server and I was trying to avoid too many Global ... > machines will not be able to resolve the sid to a name because it will not ... where the global group will be placed into the local group so ... >> import and apply the template adn look at the permission settings in the ...
      (microsoft.public.win2000.security)
    • vim-latexsuite not loading template
      ... :TTemplates command to automatically bring in a template, ... Is anyone using vim-latexsuite successfully in sid. ... In fact that is my .vimrc file. ...
      (Debian-User)
    • Re: Using Group names in the security templates (inf files)
      ... > Does anyone know if it's possible to use Group Names in a security ... > template instead of the SID of the group? ... does the SID hold domain information aswell ...
      (microsoft.public.win2000.security)
    • Re: vim-latexsuite not loading template
      ... :TTemplates command to automatically bring in a template, ... Yes I have "filetype plugin on" in my .vimrc ... Is anyone using vim-latexsuite successfully in sid. ...
      (Debian-User)