Solved

Setting Local Security Policy

Posted on 2002-04-16
5
154 Views
Last Modified: 2010-04-13
Hi all,

I'm running an NT Server network and am slowly upgrading my workstations to Win2K Pro.  Since I'm unable to take advantage of GPOs in AD, I'm trying instead to create security policy templates locally on several workstations.  I need to lock down things like drive visibility, icons on the desktop, etc.  I've gone as far as running gpedit.msc and looking through the available options that I can enable.

My question is this.  What is the best way to create a local group policy and tie it to certain users on that machine?  I want them to be locked out of specific things, but when I log on as Administrator, I don't want to be restricted.

Also, is there a way, once created, that I can export the template I modified on one machine out to other machines on the network so I don't have to go through the same process over again?

I'm familiar with creating GPOs in AD, but have never had to do it locally, so this is unfamiliar to me.

Thanks,

Doug
0
Comment
Question by:Loki
  • 3
5 Comments
 
LVL 2

Author Comment

by:Loki
ID: 6948843
I found the solution to my problem.  I thought I'd post it for anyone else having the same problem...

http://is-it-true.org/nt/nt2000/atips/atips131.shtml
0
 
LVL 5

Expert Comment

by:matt023
ID: 6949518
follow the link that Loki had provided.
To use the same security template to apply to different PC's, you have to use Security Template snap-in to configure the policies.  After you're done, save it.  It will save as an .inf file.  Copy this file to a floppy disk or a network share.  Use the Security Configuration and Analysis snap-in to import the template (.inf file) into each PC.
0
 
LVL 2

Author Comment

by:Loki
ID: 6950317
I've also found, from my playing with this the last couple of days, that once the local policy is configured, you can just copy the system.adm file from the configured machine to the other machines that you would like the local policy to apply to.
0
 
LVL 2

Author Comment

by:Loki
ID: 6960657
Scratch that last thing I posted.  This works if you replace the whole GroupPolicy folder (%systemroot%/system32/GroupPolicy) with the one from the machine you have set up.  I just did it and it works like a charm.  Copying just individual files has strange and sometimes dissastrous effects.
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 7840693
PAQ'd and points refunded

modulo

Community Support Moderator
Experts Exchange
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
HeapQueryInformation could not be located 1 884
P2V conversion for Windows NT 4.0 Server 2 2,196
Terminal 2000 connection RDP 5 137
windows 2000 - Enable wifi 7 132
What does UTC stand for?  “Coordinated Universal Time” – Think of this as the true time on Planet Earth that never changes with the exception of minor leap seconds here and there to account for the changes in the planet's rotation.   What does th…
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

930 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now