Solved

Setting Local Security Policy

Posted on 2002-04-16
5
157 Views
Last Modified: 2010-04-13
Hi all,

I'm running an NT Server network and am slowly upgrading my workstations to Win2K Pro.  Since I'm unable to take advantage of GPOs in AD, I'm trying instead to create security policy templates locally on several workstations.  I need to lock down things like drive visibility, icons on the desktop, etc.  I've gone as far as running gpedit.msc and looking through the available options that I can enable.

My question is this.  What is the best way to create a local group policy and tie it to certain users on that machine?  I want them to be locked out of specific things, but when I log on as Administrator, I don't want to be restricted.

Also, is there a way, once created, that I can export the template I modified on one machine out to other machines on the network so I don't have to go through the same process over again?

I'm familiar with creating GPOs in AD, but have never had to do it locally, so this is unfamiliar to me.

Thanks,

Doug
0
Comment
Question by:Loki
  • 3
5 Comments
 
LVL 2

Author Comment

by:Loki
ID: 6948843
I found the solution to my problem.  I thought I'd post it for anyone else having the same problem...

http://is-it-true.org/nt/nt2000/atips/atips131.shtml
0
 
LVL 5

Expert Comment

by:matt023
ID: 6949518
follow the link that Loki had provided.
To use the same security template to apply to different PC's, you have to use Security Template snap-in to configure the policies.  After you're done, save it.  It will save as an .inf file.  Copy this file to a floppy disk or a network share.  Use the Security Configuration and Analysis snap-in to import the template (.inf file) into each PC.
0
 
LVL 2

Author Comment

by:Loki
ID: 6950317
I've also found, from my playing with this the last couple of days, that once the local policy is configured, you can just copy the system.adm file from the configured machine to the other machines that you would like the local policy to apply to.
0
 
LVL 2

Author Comment

by:Loki
ID: 6960657
Scratch that last thing I posted.  This works if you replace the whole GroupPolicy folder (%systemroot%/system32/GroupPolicy) with the one from the machine you have set up.  I just did it and it works like a charm.  Copying just individual files has strange and sometimes dissastrous effects.
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 7840693
PAQ'd and points refunded

modulo

Community Support Moderator
Experts Exchange
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
auto copy 8 618
Need the Best Data Leakage Protection (Cloud Based) 1 364
Migrate Windows NT to Windows 2003 2 523
Windows 2000 Sever Lab Setup 1 696
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Facebook has became the #1 social media platform. People share many funny videos there, yet you don't know how to download them? Now you can download Videos from Facebook in just 3 simple steps.
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question