Re: Security Templates

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 08/27/04 

Date: Thu, 26 Aug 2004 17:47:36 -0500

If you apply a security template correctly to the Local Security Policy it will
change any settings in "local" policy that are defined in the template. However if a
higher priority policy [such as domain or domain controller level] is also applying
any of the same defined settings, the change from applying a security template to
Local Security Policy will not change the effective settings as shown in Local
Security Policy. For a domain controller almost all of the user rights are configured
in Domain Controller Security policy, while just a few security options are, and I
believe audit policy while all account policies are applied in the default Domain
Security Policy. I have also found that after applying a security template to a
computer that the changes do not all reflect in the Local Security Policy right away
but if I use the Security Configuration and Analysis mmc snapin tool to analyze the
computer against sat the setup security.inf security template it shows that the
changes have been applied to the local settings. --- Steve

http://www.lokbox.net/SecureXP/secAnalysis.asp --- how to use the Security
Configuration and Analysis tool.

"prk0407" <prk0407@discussions.microsoft.com> wrote in message
news:B82D56B5-A1EE-4937-AAB5-96D8505378B1@microsoft.com...
> Hello,
>
> can anyone tell me what is the difference between the "Local Security
> Settings" and using "security Templates"? If I apply a security template to
> a Windows 2000 server, will those settings show up when I open the Local
> Security Setting GUI?
>
> Currently I am applying a security template but those settings do not show
> up when I open the Local Security Settings GUI. Is this normal? Thank you
> for your help.

Relevant Pages

  • Re: MICROSOFT_AUTHENTICATION_PACKAGE
    ... Is the security option "additional restrictions for anonymous connections" - ... changes to the Local Security Policy of a domain controller, ... then examine the settings in the Local Security ... domain machine if you changed domain security policy. ...
    (microsoft.public.win2000.security)
  • Re: Group Policy Defaults
    ... > reapply the entire template. ... > between an import of security policy out of a template as compared ... The settings displayed in the Local Security Settings snapin now ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cant get rid of success audits in security portion of event viewer!
    ... What I don't understand is why there are identical settings under Domain ... Controller Security Policy and Domain security policy but changing these has ... I understand that you want to disable the success Security Auditing on the ...
    (microsoft.public.windows.server.sbs)
  • Re: Group Policy Defaults
    ... between an import of security policy out of a template as compared ... the Local Group Policy Object for security settings was ... The settings displayed in the Local Security Settings snapin now ...
    (microsoft.public.windowsxp.security_admin)
  • Re: DMZ NT4 TO Internal 2000 AD One-Way Trust via Firewall
    ... leverage an effectivity security policy to ensure that password complexities ... > currently a mess of local and domain users, no security policy, etc. ... DMZ, not publicly accessible) that aren't going away within the stated ... to non-DC web servers in the DMZ on 80 and 443 - none of which are directed ...
    (microsoft.public.windows.server.active_directory)