Solved

Re-use local security polcy in Server 2008 R2

Posted on 2011-09-19
6
375 Views
Last Modified: 2012-06-27
I am using MMC to configure local security policy on a standalone Server 2008 R2 machine.  I am using to do security hardening. Once done and tested on one server, I need to apply to a few more. These are not on domain.  Do just import the finished .msc file on the other servers?

Thanks.
0
Comment
Question by:banjo1960
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 14

Expert Comment

by:setasoujiro
ID: 36560135
0
 
LVL 1

Author Comment

by:banjo1960
ID: 36561808
Thanks for the quick response. So I just take the entries found in the Local Group Policy Object which are stored in the %Systemroot%\System32\GroupPolicy folder and copy them to the other machines that should be configured the same?  I plan to test this on a test server first.

Am I correct in assuming that the MMC snap-in for local policy is just used to view the settings and make changes?  The files used to make the changes on other machine will be those described above?

Thanks.
0
 
LVL 14

Expert Comment

by:setasoujiro
ID: 36562959
yes you should be able to do this, given they are all in a domain etc.
and for the MMC yes , it is just a layout that you save, not the content.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 1

Author Comment

by:banjo1960
ID: 36563056
Thanks for the response.  I just have a coupl of more questions.

I read one of the links you sent to me a bit closer and checked another post, as well.  I see the registry.pol file under the machine folder being updated on the machine I am making changes on.

So I can copy that registry.pol to the machine I want to apply those changes to and those registry settings will be change?

Thanks.
0
 
LVL 14

Accepted Solution

by:
setasoujiro earned 250 total points
ID: 36564931
Yeah that's the 'policy' file. so copy that and see if it works , but just do it on a testserver anyhow to see the outcom, because i've not done this myself :)
0
 
LVL 1

Author Closing Comment

by:banjo1960
ID: 36566619
Thanks for the help!
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
A procedure for exporting installed hotfix details of remote computers using powershell
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question