Understanding Security Templates

By Author: fiona
Total Articles: 191
Comment this article

A security template is a physical representation of a CompTIA Certification security configuration, a single file where a group of security settings is stored. Security templates are inactive until imported into a GPO or the Security Configuration And Analysis console. Locating all security settings in one place streamlines security administration. You can use security templates to define the following security settings in a GPO:
Account Policies
Local Policies
Event Log
Restricted Groups
Registry
File System
You cannot use security templates to define the IP Security, Public Key, Software Restriction, and Wireless Network security settings in a GPO.
Each security template is saved as a text-based .inf file. This enables you to copy, paste, or import some or all of the template attributes. You can import (apply) a security tem?plate file to a local or nonlocal GPO. All computer or user accounts in the site, domain, or OU to which the GPO is applied receive the security template settings. Importing a security template to a GPO eases domain ...
... administration by configuring security for multiple computers at once.
Default Security Settings Updated for Domain Controllers Template (DC security.inf)
This template is used when promoting a computer from a member server to a domain controller. It reflects the default security settings for file, registry, and system services.
Exercise 1: Creating a Security Templates Console
In this exercise, you create a new Security Templates 220-602 console, the main tool for man-aging security templates.
To create a Security Templates console
Use the procedure provided earlier in this lesson to create a new Security Templates console. Name the console Security Templates. The console should appear on the Administrative Tools menu.
Exercise 2: Customizing a Predefined Security Template
In this exercise, you customize a predefined security template by saving the predefined template as a new template (to preserve the original predefined template) and then making edits to security settings to create a new template.
To customize a predefined security template
1.Use the procedure provided earlier in this lesson to customize the Securedc.inf template. Save the Securedc.inf template as a template called New Template with the description New domain controller template.
2.In New Template, in Security Settings/Account Policies/Password Policy, change the Minimum Password Length to be at least 10 220-702 Exam.Save New Template.