|
Home > Archive > microsoft.public.cert.exams.mcse > September 2003 > Group policy vs Security templates
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Group policy vs Security templates
|
|
|
| Hi,
I am a bit confused by the Group policy and security templates. What is the
difference among them? Both of them allow you to configure account
policies, local polices etc.. which one should I use? Under what condition
I should use security templates instead of Group policies?
Question 2: Group policies override local policies, right? If there are a
couple of servers and there is only one server that I want to apply group
policy not allowing people to restart or shut off the server, should I just
use local policy for that server?
Question 3: How do you go back to the original security setting after you
have applied a security template in security configuration and analysis snap
in?
Thanks
Billy
| |
| Herb Martin 2003-09-28, 12:23 pm |
| > I am a bit confused by the Group policy and security templates. What is
the
> difference among them? Both of them allow you to configure account
> policies, local polices etc.. which one should I use? Under what
condition
> I should use security templates instead of Group policies?
Generally Security Policies are a subset of Group Policy which you can
apply alone to single machines -- you can also import a security policy
into a Group Policy for linking to AD containers.
> Question 2: Group policies override local policies, right? If there are a
> couple of servers and there is only one server that I want to apply group
> policy not allowing people to restart or shut off the server, should I
just
> use local policy for that server?
Your choice -- maybe both depending on how sensitive the server is.
For one server the difficulty is about the same either way. For 10 servers
it
is easier to do centrally.
> Question 3: How do you go back to the original security setting after you
> have applied a security template in security configuration and analysis
snap
> in?
The rules for this are more complicated than I thought so someone else
will have to answer....
--
Herb Martin
| |
|
|
"Bay" <Bay@nowhere.com> wrote in message
news:blsdb.609630$uu5.99987@sccrnsc04...
> Hi,
>
> SNIP
> Question 2: Group policies override local policies, right? If there
are a
> couple of servers and there is only one server that I want to apply
group
> policy not allowing people to restart or shut off the server, should
I just
> use local policy for that server?
remember that local policies are overridden by policies on the site,
domain or ou. so if you want to apply a policy to one computer, you
have to do one or two things first. look that up, and it will help
you understand how gpo's work.
> Question 3: How do you go back to the original security setting
after you
> have applied a security template in security configuration and
analysis snap
> in?
> Thanks
>
> Billy
>
You can re-apply the original template. If you are about to replace
heavily customized security settings with a template, you can export
the settings to be replaced into a template of their own. Called,
say, original. Then, to go back, apply that.
Mike
|
|
|
|
|