Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Setting Local Security Policy

Posted on 2002-04-16
5
Medium Priority
?
160 Views
Last Modified: 2010-04-13
Hi all,

I'm running an NT Server network and am slowly upgrading my workstations to Win2K Pro.  Since I'm unable to take advantage of GPOs in AD, I'm trying instead to create security policy templates locally on several workstations.  I need to lock down things like drive visibility, icons on the desktop, etc.  I've gone as far as running gpedit.msc and looking through the available options that I can enable.

My question is this.  What is the best way to create a local group policy and tie it to certain users on that machine?  I want them to be locked out of specific things, but when I log on as Administrator, I don't want to be restricted.

Also, is there a way, once created, that I can export the template I modified on one machine out to other machines on the network so I don't have to go through the same process over again?

I'm familiar with creating GPOs in AD, but have never had to do it locally, so this is unfamiliar to me.

Thanks,

Doug
0
Comment
Question by:Loki
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 2

Author Comment

by:Loki
ID: 6948843
I found the solution to my problem.  I thought I'd post it for anyone else having the same problem...

http://is-it-true.org/nt/nt2000/atips/atips131.shtml
0
 
LVL 5

Expert Comment

by:matt023
ID: 6949518
follow the link that Loki had provided.
To use the same security template to apply to different PC's, you have to use Security Template snap-in to configure the policies.  After you're done, save it.  It will save as an .inf file.  Copy this file to a floppy disk or a network share.  Use the Security Configuration and Analysis snap-in to import the template (.inf file) into each PC.
0
 
LVL 2

Author Comment

by:Loki
ID: 6950317
I've also found, from my playing with this the last couple of days, that once the local policy is configured, you can just copy the system.adm file from the configured machine to the other machines that you would like the local policy to apply to.
0
 
LVL 2

Author Comment

by:Loki
ID: 6960657
Scratch that last thing I posted.  This works if you replace the whole GroupPolicy folder (%systemroot%/system32/GroupPolicy) with the one from the machine you have set up.  I just did it and it works like a charm.  Copying just individual files has strange and sometimes dissastrous effects.
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 7840693
PAQ'd and points refunded

modulo

Community Support Moderator
Experts Exchange
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
What monsters are hiding in your child's room? In this article I will share with you a tech horror story that could happen to anyone, along with some tips on how you can prevent it from happening to you.
In this video, Percona Solution Engineer Rick Golba discuss how (and why) you implement high availability in a database environment. To discuss how Percona Consulting can help with your design and architecture needs for your database and infrastr…
In this video, Percona Solutions Engineer Barrett Chambers discusses some of the basic syntax differences between MySQL and MongoDB. To learn more check out our webinar on MongoDB administration for MySQL DBA: https://www.percona.com/resources/we…
Suggested Courses

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question