Solved

Setting Local Security Policy

Posted on 2002-04-16
5
158 Views
Last Modified: 2010-04-13
Hi all,

I'm running an NT Server network and am slowly upgrading my workstations to Win2K Pro.  Since I'm unable to take advantage of GPOs in AD, I'm trying instead to create security policy templates locally on several workstations.  I need to lock down things like drive visibility, icons on the desktop, etc.  I've gone as far as running gpedit.msc and looking through the available options that I can enable.

My question is this.  What is the best way to create a local group policy and tie it to certain users on that machine?  I want them to be locked out of specific things, but when I log on as Administrator, I don't want to be restricted.

Also, is there a way, once created, that I can export the template I modified on one machine out to other machines on the network so I don't have to go through the same process over again?

I'm familiar with creating GPOs in AD, but have never had to do it locally, so this is unfamiliar to me.

Thanks,

Doug
0
Comment
Question by:Loki
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 2

Author Comment

by:Loki
ID: 6948843
I found the solution to my problem.  I thought I'd post it for anyone else having the same problem...

http://is-it-true.org/nt/nt2000/atips/atips131.shtml
0
 
LVL 5

Expert Comment

by:matt023
ID: 6949518
follow the link that Loki had provided.
To use the same security template to apply to different PC's, you have to use Security Template snap-in to configure the policies.  After you're done, save it.  It will save as an .inf file.  Copy this file to a floppy disk or a network share.  Use the Security Configuration and Analysis snap-in to import the template (.inf file) into each PC.
0
 
LVL 2

Author Comment

by:Loki
ID: 6950317
I've also found, from my playing with this the last couple of days, that once the local policy is configured, you can just copy the system.adm file from the configured machine to the other machines that you would like the local policy to apply to.
0
 
LVL 2

Author Comment

by:Loki
ID: 6960657
Scratch that last thing I posted.  This works if you replace the whole GroupPolicy folder (%systemroot%/system32/GroupPolicy) with the one from the machine you have set up.  I just did it and it works like a charm.  Copying just individual files has strange and sometimes dissastrous effects.
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 7840693
PAQ'd and points refunded

modulo

Community Support Moderator
Experts Exchange
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In this blog post, we’ll look at how ClickHouse performs in a general analytical workload using the star schema benchmark test.
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question