Re: how to apply w2k security to w2k member servers under w2k3 domain?

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 04/01/05 

Date: Thu, 31 Mar 2005 23:15:05 -0600

Yes you can do exactly what you propose and it makes good sense. Create
separate OU's for your Windows 2000 servers and use an OU with a Windows
2000 security template imported into it. Do not mix and match security
templates between Windows 2000 and Windows 2003 computers as you may have
unpredictable results. For domain controllers however do NOT move any out of
the default domain controllers container. You can however create separate
OU's inside of the domain controllers container if need be. Use the Security
Configuration and Analysis mmc snapin to verify the effective security
policy applied to your servers to make sure security settings are what you
expect. The biggest difference in security templates is security options as
Windows 2003 has several more than Windows 2000 and many have been
named. --- Steve

"ben" <ben@discussions.microsoft.com> wrote in message
news:AF1F769B-D2AF-48AF-9A7C-E8D928C9EAC0@microsoft.com...
> hi,
>
> I have one w2k3 AD domain, all dcs are w2k3, 80% servers are w2k3 servers,
> 20% are w2k servers, I can apply w2k3 member server baseline security to
> all
> w2k3 servers and then apply customized security templates to them
> according
> to specific roles, but how to manage the security to w2k servers using
> GPO?
> if put all w2k servers into one OU and apply baseline security, how to
> apply
> the w2k security template to w2k servers under w2k3 domain? can I just
> import the w2k security template into w2k3 GPO and link to w2k servers OU?
>
>
> thanks!

Relevant Pages

  • RE: IIS6 Security and other web servers
    ... IIS6 Security and other web servers ... I know of no Windows architecture that is exposed directly to ... I know of a number of LAMP-type servers that are ... exposed directly to the Internet with no intervening layers. ...
    (Security-Basics)
  • Re: Installation instructions for Firefox somewhere?
    ... Many updates are not security-related. ... > of dealing with an app that breaks as a result of a security update ... The solution here is to stop using Windows, ... They can just plug in the servers and run ...
    (freebsd-questions)
  • Re: The Common System Interface: Intels Future Interconnect
    ... OS specific backups, data archiving, security auditing etc. ... applications on special purpose servers that *should* be kept ... but you don't need VMware to do that for just run Windows apps. ... Wintel/Linux servers that need security patches every month. ...
    (comp.os.vms)
  • Re: Win2k3 Security Settings Break PerfMon
    ... This can be disabled using Local Security Policy ... This was one of the settings that I modified while troubleshooting the ... > You didn't say what the operating system is of the servers you are having ... a bevy of security templates which automate the ...
    (microsoft.public.win2000.security)
  • Re: Viewing Local Security Policy on Windows 2003 Member Server?
    ... Windows ships with a default security set up that is defined by regular security templates, ... Those templates can be view using the Security Templates editor MMC snap-in and can show you what the default settings are prior to joining a domain. ... Script Group Policy Settings with the GPExpert Scripting Toolkit for PowerShell! ... Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy Information Hub: ...
    (microsoft.public.windows.group_policy)