Re: W2K Hardening

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 08/29/05

  • Next message: dtremain: "Cant delete printer, "Restrictions" warning" 
    Date: Mon, 29 Aug 2005 09:08:12 -0700

    Export is available on the Security setting node.
    In my experience, for W2k this has been less than reliable, as
    at some point secedit /export broke, and anyway, it did/does
    not export all that you have mentioned but only the security
    settings (i.e. not the filesystem, the registry, etc.)
    What I have found necessary is use of the SCE Templates and
    the SCE Analysis and Config snapins to define a new template
    (in the first of these) and to import and test (with the second,
    clearing the database with each import of the template) by
    analyzing, until one gets a template that is perfect match.
    The template is transportable (to extent that no custom groups
    have been used in User Rights statements or ACL definitions). 

    -- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"newbie" <newbie@discussions.microsoft.com> wrote in message
news:333B8CBD-2357-4E0C-AE75-78740C9FD2BD@microsoft.com...
> Hi,
>
> Thanks a lot. Just curious, can this be achieve using the GUI - security
> configuration analysis/security templates.
>
> Thanks.
>
> "Miha Pihler [MVP]" wrote:
>
> > Hi,
> >
> > You should be able to use
> >
> > secedit /export /cfg config.inf
> >
> > to export the policy from Windows 2000 computer. Take the inf file to
> > another Windows 2000 computer and import it using
> >
> > secedit /import /cfg config.cfg
> >
> > option.
> >
> > I hope this helps,
> >
> > -- 
> > Mike
> > Microsoft MVP - Windows Security
> >
> > "newbie" <newbie@discussions.microsoft.com> wrote in message
> > news:267C28E1-6779-4308-B113-D746F0B195F5@microsoft.com...
> > > Hi,
> > >
> > > I have setup account, user rights, settings for log file, services and
> > > registry for a stanalone W2K machine
> > > using the manual way.
> > >
> > > How can I possibly export these settings to an .inf and apply them on
> > > another machine?
> > >
> > > Thanks in advance
> >
> >
> >
  • Next message: dtremain: "Cant delete printer, "Restrictions" warning"

    Relevant Pages

    • Re: security template file import
      ... i sort a little more comfortable going through the reimport of the security ... in here is a single file - GPTTMPL.INF that lists the securtiy settings (and ... when the DC as a group policy client downloads the GPO it sticks the ... > template outside of the GPO which you edit to contain all the security ...
      (microsoft.public.win2000.security)
    • Re: Group Policy Defaults
      ... > reapply the entire template. ... > between an import of security policy out of a template as compared ... The settings displayed in the Local Security Settings snapin now ...
      (microsoft.public.windowsxp.security_admin)
    • Re: User Rights in Setup Security Template
      ... > template in order to change some password policies. ... > Group Policy mmc, or else, in Security Configuration and Analysis ... > settings is impacting you. ... > templates and analyze your ...
      (microsoft.public.windowsxp.security_admin)
    • Re: USB disable policy template problem
      ... Uncheck the Only show policy settings that can be fully managed checkbox ... To add administrative template you need to select Action|Add/Remove ... serious treat for corporate security, the last pair is rarely used ... We decided to purchase USB & Ports ...
      (microsoft.public.windows.server.general)
    • RE: local security policy
      ... Yes I am using the security config and analysis snap-in to create the ... included in my exported template. ... Right now the only way that I know how to get those settings applied to ... Configuration and Analysis snap-in? ...
      (Focus-Microsoft)