Security Templates
From: Maureen (Maureen_at_discussions.microsoft.com)
Date: 06/17/05
- Previous message: Bruce Chambers: "Re: Messager Service Pop-up Dialogs"
- Next in thread: Roger Abell: "Re: Security Templates"
- Reply: Roger Abell: "Re: Security Templates"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 16 Jun 2005 17:38:04 -0700
1. I'm trying to write a security template for a standalone Win2000 server.
Where I am running into issues is on File System and Registry settings.
If I only want to make changes to a high level folder but only that folder,
do I have to add all lower level folders and files to the template to avoid
inheritance issues?
ie. If I wanted to change the permissions that the Everyone group had on
%systemroot%, I would have to add every folder and file below that and select
"Do not allow permissions on this file or folder to be replaced"? Is there
any way to say just this object?
2. Likewise, if I wanted to apply auditing to a particular folder, I'd have
to specify all of the default permissions on the folder to add the auditing
or I'd overwrite my permissions?
3. If I want to do Services Settings, how do I determine the default
permissions that should be there? i.e. I want a service to come up as
disabled, but it prompts me for permissions as well.
- Previous message: Bruce Chambers: "Re: Messager Service Pop-up Dialogs"
- Next in thread: Roger Abell: "Re: Security Templates"
- Reply: Roger Abell: "Re: Security Templates"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
