Solved

Re-use local security polcy in Server 2008 R2

Posted on 2011-09-19
6
369 Views
Last Modified: 2012-06-27
I am using MMC to configure local security policy on a standalone Server 2008 R2 machine.  I am using to do security hardening. Once done and tested on one server, I need to apply to a few more. These are not on domain.  Do just import the finished .msc file on the other servers?

Thanks.
0
Comment
Question by:banjo1960
  • 3
  • 3
6 Comments
 
LVL 14

Expert Comment

by:setasoujiro
ID: 36560135
0
 
LVL 1

Author Comment

by:banjo1960
ID: 36561808
Thanks for the quick response. So I just take the entries found in the Local Group Policy Object which are stored in the %Systemroot%\System32\GroupPolicy folder and copy them to the other machines that should be configured the same?  I plan to test this on a test server first.

Am I correct in assuming that the MMC snap-in for local policy is just used to view the settings and make changes?  The files used to make the changes on other machine will be those described above?

Thanks.
0
 
LVL 14

Expert Comment

by:setasoujiro
ID: 36562959
yes you should be able to do this, given they are all in a domain etc.
and for the MMC yes , it is just a layout that you save, not the content.
0
How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

 
LVL 1

Author Comment

by:banjo1960
ID: 36563056
Thanks for the response.  I just have a coupl of more questions.

I read one of the links you sent to me a bit closer and checked another post, as well.  I see the registry.pol file under the machine folder being updated on the machine I am making changes on.

So I can copy that registry.pol to the machine I want to apply those changes to and those registry settings will be change?

Thanks.
0
 
LVL 14

Accepted Solution

by:
setasoujiro earned 250 total points
ID: 36564931
Yeah that's the 'policy' file. so copy that and see if it works , but just do it on a testserver anyhow to see the outcom, because i've not done this myself :)
0
 
LVL 1

Author Closing Comment

by:banjo1960
ID: 36566619
Thanks for the help!
0

Featured Post

Want to promote your upcoming event?

Attending an event? Speaking at a conference? Or exhibiting at a tradeshow? Easily inform your contacts by using a promotional banner in your email signature. This will ensure your organization’s most important contacts are in the know.

Join & Write a Comment

Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now