How To Use Security Configuration And Analysis Or Secedit To Implement Server Roles

By Author: Shirley Green
Total Articles: 129
Comment this article

Security Configuration and Analysis is a tool that can be used to apply a security 70-291 template. When two templates are applied, the result is similar to that achieved with Group Policy. Where the settings do not conflict, they are merged. If settings conflict, the last one applied wins.
To use Security Configuration and Analysis to apply two templates, you can simply apply the baseline template and then apply the incremental template for the specific server. If you have many servers that support the same role, you can easily after applying both templates to a server export a new template that combines the settings of both. The new template can be used to apply security to other servers that fill the same role.
However, rather than apply templates at the console of a single server at a time, you can use secedit. You use secedit in a script that can be automatically run at logon, when booting, or as a task at some other time.
Two types of templates are necessary. First, a baseline security template should be designed that, if applied, will reduce the attack surface ...
... and tightly lock clown controls on Windows Server 2003 free MCITP PDF questions. Next, incremental templates should be developed for each server role. The incremental template will start only those ser?vices and/or loosen control for the specific server role to function. Lesson 2, "Defining a Baseline Security Template," and the topic "Guidelines for Designing Incremental Security Templates" in lesson 3 will teach you how to do so.
Propose smart cards, strongest encryption level, and quar?antine control.
Automate VPN client installation using CMAK. Automate computer certificate distribution if required. Allow both PPTP and L2TP/IPSec VPN connections.
Propose smart cards, strongest encryption level, and quarantine control. Provide company computers, support, user training, and technical controls to prevent accidental or purposeful modification of free A+ practice exams software and configuration.