Re: 2003 admin templates on windows 2000

• Previous message: Adam: "Re: 2003 admin templates on windows 2000"
• In reply to: Adam: "Re: 2003 admin templates on windows 2000"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Mon, 21 Mar 2005 16:26:11 -0600

I misread your post in that you were talking about administrative
templates - not security templates though the information I posted about
security templates [.inf files] is still good to know. You can modify
administrative template so that they can also be managed by Windows 2000
domain controllers. The newer settings will apply to XP Pro/W2003 computers
as described in the setting for Group Policy. Sorry for the confusion.
Windows XP SP2 has new .adm files for the new SP2 Group Policy settings such
as for Windows Firewall and Internet Explorer security. The links below may
help. --- Steve

http://support.microsoft.com/?id=816662
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/mngwinxp.mspx

"Adam" <Adam@discussions.microsoft.com> wrote in message
news:47CDCEDD-290F-445C-B5C4-CA7A0C83C41E@microsoft.com...
> Always nice to have a second opinion. I'm going to stick with my current
> .adm
> files. I'll just wait until all domain controllers are upgraded to
> win2003. I
> noticed something else today regarding this issue. Yesterday I applied a
> group policy to a test OU on the win2003 DC. The new administrative
> templates
> showed up as options. I looked at the test OU on the windows 2000 DC today
> and saw that the group policy only showed the 2000 .adm files. I just now
> looked back at the 2003 DC and noticed that the test OU has the 2000 .adm
> options (no more 2003 options). It looks like replication converted the
> group
> policy back to 2000.
>
> Thanks for your help, Adam
>
> "Steven L Umbach" wrote:
>
>> Security templates are not part of .adm files. You pose a good question
>> and
>> I have never really seen an official MS document on best practice how to
>> configure such. Keep in mind that there are many security options and a
>> very
>> few user rights for Windows 2003 that are not compatible for Windows
>> 2000. I
>> would recommend NOT using Windows 2003 Security templates on a Windows
>> 2000
>> computer or vice versa. Domain Controller Security Policy has mostly user
>> rights and audit policy configured which should work well on either
>> domain
>> controller operating system. As far as security options for domain
>> controllers, you could either configure them in Local Security Policy or
>> create two subcontainers in the domain controller container. One for W2K
>> and
>> one for Windows 2003. The you could create a Group Policy for each sub
>> container and configure security options for each operating system domain
>> controller at that level. --- Steve
>>
>>
>> "Adam" <Adam@discussions.microsoft.com> wrote in message
>> news:72552073-6D1E-4856-B9B5-B4B66CFDC60D@microsoft.com...
>> >I have a windows 2000 domain that I recently ran adprep on to modify the
>> > schema so I could add a windows 2003 domain controller. This was
>> > successful.
>> > I really like the administrative templates on windows 2003 and wish to
>> > use
>> > them for group policy. I noticed that I can only access the new
>> > components
>> > when I edit group policy on the windows 2003 server. If I look at the
>> > windows
>> > 2000 servers, I only have access to the 2000 admin templates. My
>> > question
>> > is
>> > this, can I copy the adm files from the 2003 server and place them on
>> > the
>> > 2000 servers? or will my group policies blow up in my face.
>> >
>> > Any thoughts are appreciated. Thanks, Adam
>>
>>
>>

• Previous message: Adam: "Re: 2003 admin templates on windows 2000"
• In reply to: Adam: "Re: 2003 admin templates on windows 2000"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]