Using Security Templates

By Author: Mike Jones
Total Articles: 256
Comment this article

Windows Server 2003 provides a centralized method of configuring MCTS windows 7 security by using security templates. This lesson explains how to use security templates.
Predefined Security Templates
Windows Server 2003 includes a set of predefined security templates, each based on the role of a computer and common security scenarios: from security settings for workstations and servers to highly secure domain controllers. These templates can be used as provided, they can be modified, or they can serve as a basis for creating custom security templates. Apply predefined security templates to production systems only after testing to ensure that the right level of application functionality is maintained for your network and system architecture.
The predefined security templates are
Compatible workstation or server security settings (Compatws.inf)
Default security settings updated for mcts certification domain controllers (DC security.inf)
Highly secure domain controller security settings (Hisecdc.inf)
Highly ...
... secure workstation or server security settings (Hisecws.inf)
Root (Rootsec.inf)
Secure domain controller security settings (Securedc.inf)
Secure workstation or server security settings (Securews.inf)
Out of the box default security settings (Setup security.inf)
By default, predefined templates are stored in the %5ysfemroo/%\Security\Templates folder.
Security templates are designed to be applied to computers that use the default security settings. Security templates incrementally modify the default security settings, if they are on the computer. The default security settings are not installed before performing the modifications.
A security template is a physical representation of a security configuration, a single file where a group of security settings is stored. You can use security templates to define the Account Policies, Local Policies, Event Log, Restricted Groups, Registry,and File System settings in a GPO.
Windows Server 2003 includes a set of predefined security templates, based on the role of a computer and common security scenarios. These templates can be used as provided, they can be modified, or they can serve as a MCITP certification basis for creating custom security templates.