Re: Question for Roger Abell
- From: "Roger Abell [MVP]" <mvpNoSpam@xxxxxxx>
- Date: Thu, 22 Feb 2007 12:44:47 -0700
Hi void,
You know, there is a power in newsgroup archives, and a
flaw when it comes to things like issues with Windows in
that what was a problem can get fixed.
It really depends on the precise versions of the tools in
use (OS rev and whether one did both to download the
updated adminpak and support tools, which have often
not been included with the service pack but released in
a separate download).
Most of the issues with the Template editor seem to be
cleared at this point if one is using post-W2k fully updated.
The big one seemed to be that attempting to adjust Services
settings was being handled incorrectly for quite a while.
(KBs available on this)
I recall your post on the inheritance issue depending on how
the SDDL was stated, which was a new one on me.
I have not had the non-save issue for quite a long time, so
I am not sure now what OS rev's it impacted. There seems
to be an issue with the export capability of secedit that does
apparently remain today. Also, the analysis for the filesystem
is sort of skewed in how it bubbles up conflicts and their counts;
it does give the correct info at the leaves, but the parental nodes
are not always marked in a sensible way (I think the algorithm
used is just plain incorrect).
Anyway, I would suggest you make a post over in the group
policy newsgroup, perhaps crossposted to a couple other
likely newsgroups, with well choosen title, soliciting people
to relate the errors they have seen in current releases.
Things have gotten better and may further with the tools release
for the Vista generation.
Roger
<void.no.spam.com@xxxxxxxxx> wrote in message
news:1172167485.594114.259930@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi Roger,
I've seen some old posts from you in which you mention that the
Security Templates and Security Configuration and Analysis snap-ins
are fairly buggy. I've already encountered one problem (I mentioned
it a few weeks ago -- the SCaA does not always apply the "inherit from
parent" permission on some folders). And in one of your posts you say
that sometimes a security template will not be saved (even if you tell
it to save) until after you close the MMC. Do you remember what other
problems there are?
I'm going thru the Windows 2000 Security Hardening Guide, and it
recommends the use of the SCaA to apply some of the included security
templates. Do you know if the problems you are aware of have been
fixed? If so, have they been fixed only for Windows XP, or have they
been fixed for Windows 2000 as well?
Thanks!
.
- Follow-Ups:
- Re: Question for Roger Abell
- From: void.no.spam.com@xxxxxxxxx
- Re: Question for Roger Abell
- References:
- Question for Roger Abell
- From: void.no.spam.com@xxxxxxxxx
- Question for Roger Abell
- Prev by Date: Question for Roger Abell
- Next by Date: Re: Security ??
- Previous by thread: Question for Roger Abell
- Next by thread: Re: Question for Roger Abell
- Index(es):
Relevant Pages
|
|
