Re: Security Templates

From: prk0407 (prk0407_at_discussions.microsoft.com)
Date: 08/27/04 

Date: Fri, 27 Aug 2004 07:53:06 -0700

Thank you for the reply!
"Steven L Umbach" wrote:

> If you apply a security template correctly to the Local Security Policy it will
> change any settings in "local" policy that are defined in the template. However if a
> higher priority policy [such as domain or domain controller level] is also applying
> any of the same defined settings, the change from applying a security template to
> Local Security Policy will not change the effective settings as shown in Local
> Security Policy. For a domain controller almost all of the user rights are configured
> in Domain Controller Security policy, while just a few security options are, and I
> believe audit policy while all account policies are applied in the default Domain
> Security Policy. I have also found that after applying a security template to a
> computer that the changes do not all reflect in the Local Security Policy right away
> but if I use the Security Configuration and Analysis mmc snapin tool to analyze the
> computer against sat the setup security.inf security template it shows that the
> changes have been applied to the local settings. --- Steve
>
> http://www.lokbox.net/SecureXP/secAnalysis.asp --- how to use the Security
> Configuration and Analysis tool.
>
> "prk0407" <prk0407@discussions.microsoft.com> wrote in message
> news:B82D56B5-A1EE-4937-AAB5-96D8505378B1@microsoft.com...
> > Hello,
> >
> > can anyone tell me what is the difference between the "Local Security
> > Settings" and using "security Templates"? If I apply a security template to
> > a Windows 2000 server, will those settings show up when I open the Local
> > Security Setting GUI?
> >
> > Currently I am applying a security template but those settings do not show
> > up when I open the Local Security Settings GUI. Is this normal? Thank you
> > for your help.
>
>
>

Relevant Pages

  • Re: MICROSOFT_AUTHENTICATION_PACKAGE
    ... Is the security option "additional restrictions for anonymous connections" - ... changes to the Local Security Policy of a domain controller, ... then examine the settings in the Local Security ... domain machine if you changed domain security policy. ...
    (microsoft.public.win2000.security)
  • Re: Group Policy Defaults
    ... > reapply the entire template. ... > between an import of security policy out of a template as compared ... The settings displayed in the Local Security Settings snapin now ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cant get rid of success audits in security portion of event viewer!
    ... What I don't understand is why there are identical settings under Domain ... Controller Security Policy and Domain security policy but changing these has ... I understand that you want to disable the success Security Auditing on the ...
    (microsoft.public.windows.server.sbs)
  • Re: Group Policy Defaults
    ... between an import of security policy out of a template as compared ... the Local Group Policy Object for security settings was ... The settings displayed in the Local Security Settings snapin now ...
    (microsoft.public.windowsxp.security_admin)
  • Re: DMZ NT4 TO Internal 2000 AD One-Way Trust via Firewall
    ... leverage an effectivity security policy to ensure that password complexities ... > currently a mess of local and domain users, no security policy, etc. ... DMZ, not publicly accessible) that aren't going away within the stated ... to non-DC web servers in the DMZ on 80 and 443 - none of which are directed ...
    (microsoft.public.windows.server.active_directory)