Solved

Setting Local Security Policy

Posted on 2002-04-16
5
153 Views
Last Modified: 2010-04-13
Hi all,

I'm running an NT Server network and am slowly upgrading my workstations to Win2K Pro.  Since I'm unable to take advantage of GPOs in AD, I'm trying instead to create security policy templates locally on several workstations.  I need to lock down things like drive visibility, icons on the desktop, etc.  I've gone as far as running gpedit.msc and looking through the available options that I can enable.

My question is this.  What is the best way to create a local group policy and tie it to certain users on that machine?  I want them to be locked out of specific things, but when I log on as Administrator, I don't want to be restricted.

Also, is there a way, once created, that I can export the template I modified on one machine out to other machines on the network so I don't have to go through the same process over again?

I'm familiar with creating GPOs in AD, but have never had to do it locally, so this is unfamiliar to me.

Thanks,

Doug
0
Comment
Question by:Loki
  • 3
5 Comments
 
LVL 2

Author Comment

by:Loki
ID: 6948843
I found the solution to my problem.  I thought I'd post it for anyone else having the same problem...

http://is-it-true.org/nt/nt2000/atips/atips131.shtml
0
 
LVL 5

Expert Comment

by:matt023
ID: 6949518
follow the link that Loki had provided.
To use the same security template to apply to different PC's, you have to use Security Template snap-in to configure the policies.  After you're done, save it.  It will save as an .inf file.  Copy this file to a floppy disk or a network share.  Use the Security Configuration and Analysis snap-in to import the template (.inf file) into each PC.
0
 
LVL 2

Author Comment

by:Loki
ID: 6950317
I've also found, from my playing with this the last couple of days, that once the local policy is configured, you can just copy the system.adm file from the configured machine to the other machines that you would like the local policy to apply to.
0
 
LVL 2

Author Comment

by:Loki
ID: 6960657
Scratch that last thing I posted.  This works if you replace the whole GroupPolicy folder (%systemroot%/system32/GroupPolicy) with the one from the machine you have set up.  I just did it and it works like a charm.  Copying just individual files has strange and sometimes dissastrous effects.
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 7840693
PAQ'd and points refunded

modulo

Community Support Moderator
Experts Exchange
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In this step by step tutorial with screenshots, we will show you HOW TO: Enable SSH Remote Access on a VMware vSphere Hypervisor 6.5 (ESXi 6.5). This is important if you need to enable SSH remote access for additional troubleshooting of the ESXi hos…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now