Re: Question for Roger Abell

Thank you for the reply, Roger. It sounds like Windows 2000 may not
have gotten some of the latest fixes.

Regarding the Template editor problems... are those solved by just
closing MMC after saving the template? Or could things be saved
incorrectly even after closing MMC?

Regarding the SCaA problems... if I were to do an Analysis after
doing a Configure, and the Analysis looked good, then would it be safe
to assume that the Configure worked perfectly?


On Feb 22, 2:44 pm, "Roger Abell [MVP]" <mvpNoS...@xxxxxxx> wrote:
Hi void,

You know, there is a power in newsgroup archives, and a
flaw when it comes to things like issues with Windows in
that what was a problem can get fixed.

It really depends on the precise versions of the tools in
use (OS rev and whether one did both to download the
updated adminpak and support tools, which have often
not been included with the service pack but released in
a separate download).

Most of the issues with the Template editor seem to be
cleared at this point if one is using post-W2k fully updated.
The big one seemed to be that attempting to adjust Services
settings was being handled incorrectly for quite a while.
(KBs available on this)
I recall your post on the inheritance issue depending on how
the SDDL was stated, which was a new one on me.
I have not had the non-save issue for quite a long time, so
I am not sure now what OS rev's it impacted. There seems
to be an issue with the export capability of secedit that does
apparently remain today. Also, the analysis for the filesystem
is sort of skewed in how it bubbles up conflicts and their counts;
it does give the correct info at the leaves, but the parental nodes
are not always marked in a sensible way (I think the algorithm
used is just plain incorrect).

Anyway, I would suggest you make a post over in the group
policy newsgroup, perhaps crossposted to a couple other
likely newsgroups, with well choosen title, soliciting people
to relate the errors they have seen in current releases.
Things have gotten better and may further with the tools release
for the Vista generation.

Roger

<void.no.spam....@xxxxxxxxx> wrote in message

news:1172167485.594114.259930@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Hi Roger,

I've seen some old posts from you in which you mention that the
Security Templates and Security Configuration and Analysis snap-ins
are fairly buggy. I've already encountered one problem (I mentioned
it a few weeks ago -- the SCaA does not always apply the "inherit from
parent" permission on some folders). And in one of your posts you say
that sometimes a security template will not be saved (even if you tell
it to save) until after you close the MMC. Do you remember what other
problems there are?

I'm going thru the Windows 2000 Security Hardening Guide, and it
recommends the use of the SCaA to apply some of the included security
templates. Do you know if the problems you are aware of have been
fixed? If so, have they been fixed only for Windows XP, or have they
been fixed for Windows 2000 as well?

Thanks!


.

Relevant Pages

  • Re: Question for Roger Abell
    ... closing MMC after saving the template? ... I have not seen the fail to save of a template issue for some time ... Security Templates and Security Configuration and Analysis snap-ins ... If so, have they been fixed only for Windows XP, or have they ...
    (microsoft.public.win2000.security)
  • Re: I wish Normal.dot would mind its own business
    ... "Tony Jollans" wrote: ... Press the Windows Logo key and R together ... Press Alt+F4 to exit the registry editor. ... template, I said no all the way through to page closure. ...
    (microsoft.public.word.docmanagement)
  • Re: I wish Normal.dot would mind its own business
    ... Press the Windows Logo key and R together ... Press Alt+F4 to exit the registry editor. ... Reinstalling Word is unlikely to help; ... template, I said no all the way through to page closure. ...
    (microsoft.public.word.docmanagement)
  • Re: Cant find info about 11-10-09 Word update
    ... I now have 37 topical folders at the root of my Word 2007 ... folder in Windows Explorer. ... Works 4.5a had created new copies of the template file via Windows ... realize that the application can be set only to display "local" Help content ...
    (microsoft.public.word.application.errors)
  • Re: I wish Normal.dot would mind its own business
    ... "Tony Jollans" wrote: ... Press the Windows Logo key and R together ... Press Alt+F4 to exit the registry editor. ... template, I said no all the way through to page closure. ...
    (microsoft.public.word.docmanagement)
Quantcast