how to apply w2k security to w2k member servers under w2k3 domain?

From: ben (ben_at_discussions.microsoft.com)
Date: 03/31/05 

Date: Wed, 30 Mar 2005 22:51:09 -0800

hi,

I have one w2k3 AD domain, all dcs are w2k3, 80% servers are w2k3 servers,
20% are w2k servers, I can apply w2k3 member server baseline security to all
w2k3 servers and then apply customized security templates to them according
to specific roles, but how to manage the security to w2k servers using GPO?
if put all w2k servers into one OU and apply baseline security, how to apply
the w2k security template to w2k servers under w2k3 domain? can I just
import the w2k security template into w2k3 GPO and link to w2k servers OU?

thanks!

Relevant Pages

  • Security Template
    ... TCP/UDP ports that we need on the servers only. ... Problem 1 - After applied the security template, ... message "IP Security can not be triggered by port 500 traffic. ...
    (Security-Basics)
  • file permissions set via security template
    ... I've been using the security templates to make my servers ... permissions and set Apply to: ... security template on my server so these permissions are ... investigation showed that the full control permission was ...
    (microsoft.public.win2000.security)
  • 560 Audit Failure
    ... I am seeing the following event in the security log for all of our Win2k3 ... We use a security template to configure items like auditing events, ... I am not seeing the event in the Win2k servers. ...
    (microsoft.public.security)
  • Re: Common Issues
    ... the following is an EXAMPLE for upgrading NT4 to W2K3 AD. ... w2k3 member servers. ... * promote both w2k3 member servers to DCs and after that make both DCs a GC ...
    (microsoft.public.windows.server.active_directory)
  • Re: upgrade NT 4.0 to Windows 2000 AD
    ... and not w2k3 AD? ... Introduce two fresh installed W2K3 member servers to the domain and ... promote both w2k3 member servers to DCs and after that make both DCs a GC ... I've a windows NT 4.0 based network & I need help to upgrade it to 2000 ...
    (microsoft.public.win2000.active_directory)