Reapply the default security settings: Secure configuration and analysis of _win servers

1. Security analysis
The state of the operating system and applications on the computer is dynamic.
For example, to resolve administrative or network problems immediately, you may need to change the security level temporarily. However, it is often impossible to restore this more
Change. This means that the computer can no longer meet the requirements of enterprise security.
General analysis, as part of an enterprise risk management program, allows administrators to track and ensure that there is a high enough level of security on each machine.
Administrators can adjust the security level and, most importantly, detect any security failures that occur during the system's long-running operation.
Security Configuration and analysis enables you to quickly review the results of your security analysis. Make recommendations next to the current system settings, using visual markup
Or note highlights areas where the current settings do not match the recommended security level. Security Configuration and analysis also provides a solution to the analysis shown
Any contradictory function.
2. Security Configuration
Security Configuration and analysis can also be used to directly configure security for the local system. Using a personal database, you can import by "Ann
Full template to create security templates and apply them to your local computer. This will immediately use the level specified in the template to configure the system Ann
Full sex.
Description of the Microsoft Help and Support Center.
Run--->MMC console---> Files---> Add/Remove snap-in---> Standalone--> add--> security Configuration and Analysis--> right
Key, security Configuration and Analysis--> open the data--> Select the database, where the new database is selected, the file name is: (casually
--> Open, select Security template (updated project, file system, registry, Group Policy, security policy, etc., And,setup
Security.inf (all default configurations)--> I'm here to restore the system's default permissions configuration so the selected
Rootsec.inf---> Immediately analyze the computer---> Error file path (watch your choice)----> Import Template---> Selection
Windwos.onf (Below is the Rootsec.inf file content, I want to restore only Windows default permissions, so the following
C:\ disk "%systemdrive%\" changed to Windows.inf\ "%windir%\", if you want to restore the other disk's
Default permission settings, then "%systemdrive%\ to the disk to be configured Furu: D:\,e:\ ...." Wait for it)--->
Configure your computer Now
------------------------------------------------------
Go and see, the default permissions back Ah, baby kiss ' ~ ~ ^_^

Windwos.inf
_____________________________________________________

; Copyright (c) Microsoft Corporation. All rights reserved.

; Security Configuration Template for security Configuration Manager
[Version]
Signature= "$CHICAGO $"
driverver=10/01/2002,5.2.3790.0
[Profile Description]
%sceprofiledescription%
[File Security]
"%windir%\", 0, "D:ar" (a;oici;ga;;; BA) (a;oici;ga;;; SY) (a;oiciio;ga;;; CO) (A; Cioi; GRGX;;; BU)
A ci;0x00000004;;; BU) (A; ciio;0x00000002;;; BU) (A;;;;;; GRGX;;; WD) "

[Strings]
Sceprofiledescription = "Applies the default root permissions to the OS partition and propagates this permission to the root directory inherited from
Child objects. The propagation time is determined by the number of unprotected child objects. Please see the online Help for further information. "
-------------------------------------------------------------------------------------
Other functions did not try, if necessary, to get it, I have struggled for two days to feel so little things.