Configuring and applying security Templates on Windows 2000

First, Introduction:

A security template is a new feature of Windows 2000. It is a physical representation of the security configuration, consisting of a file (. inf) of the security properties supported by Windows 2000. It organizes all existing security attributes into one location to simplify security management. Security templates contain seven categories of security information: Account policy, local policy, time log, restricted group, file system, registry, system services. Security templates can also be used as security analysis.

Ii. Scope of application

Windows 2000 Professional Edition and Server Edition

Third, the template:

Microsoft recommends a series of Windows 2000 Security Configuration Templates

w2khg_baseline.inf– should be applied to common settings for all computers.

w2khg_memberwks.inf– only the settings for workstations that are members of a domain.

w2khg_memberlaptop.inf– settings only for laptops that are members of a domain.

w2khg_memberserver.inf– only the settings for servers that are connected to the domain.

w2khg_domaincontroller.inf– is only for domain controller settings.

w2khg_standalonewks.inf– is only for stand-alone workstation settings.

w2khg_standalonesrv.inf– settings only for stand-alone servers.

Security templates can be from http://www.microsoft.com/downloads/details.aspx? familyid=15e83186-a2c8-4c8f-a9d0-a0201f639a56&displaylang=en Download

Iv. View and edit Security Configuration templates

1. Copy the required templates to the "\%systemroot%securitytemplates" directory or to a different location on your hard disk.

Note: If you copy them to a different location, you need (a) to ensure that the location is secure so that users cannot modify the template and (b) add it to the security templates snap-in in MMC.

2, click Start, click Run, type Mmc.exe, and then click OK.