Sometimes text books infruriate me. I am reading a book now which says that you can export the security configuration of a computer to a Security Template. I am aware that you can export an existing template. But, is it true that you can create a template based on the settings already established in a computer, and export that template?

__________________
The Computer is a creation of man. Man is a creation of God! -
Joe from Brooklyn

Report this post to a moderator

Yes.

For example, you can create a custom security template using an exisitng DC, save it, then use a GPO to import the custom .inf file on other DCs in the domain, or do it manually if you want to. This is done to tailor and standardize the security on the DCs in your environment.

__________________
"I was planning to take over the world, but got distracted by something sparkly..."

Report this post to a moderator

Understood. But what I have read implies that you can export the settings of your PC. I know that if those settings are the result of configuring a template, then you can export that template. What if your current settings are the result of a multitude of tweaks, can you create a template that matches your current settings, and then export that template?

__________________
The Computer is a creation of man. Man is a creation of God! -
Joe from Brooklyn

Report this post to a moderator

Short answer is Yes.

How you go about doing it will depend on what exactly you are trying to accomplish in your environment and how you want to deploy. DCs are usually standardized via custom .inf security templates. Registry tweaks and more workstation related settings are usually done via custom .adm files. Both can be distributed via GPOs or imported in manually.

Here are a couple of articles that may help a little.

http://support.microsoft.com/defaul...=kb;[LN];216735

http://support.microsoft.com/defaul...=kb;[LN];225087

Hope this helps some.

__________________
"I was planning to take over the world, but got distracted by something sparkly..."

Report this post to a moderator