Solved

Re-use local security polcy in Server 2008 R2

Posted on 2011-09-19
6
376 Views
Last Modified: 2012-06-27
I am using MMC to configure local security policy on a standalone Server 2008 R2 machine.  I am using to do security hardening. Once done and tested on one server, I need to apply to a few more. These are not on domain.  Do just import the finished .msc file on the other servers?

Thanks.
0
Comment
Question by:banjo1960
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 14

Expert Comment

by:setasoujiro
ID: 36560135
0
 
LVL 1

Author Comment

by:banjo1960
ID: 36561808
Thanks for the quick response. So I just take the entries found in the Local Group Policy Object which are stored in the %Systemroot%\System32\GroupPolicy folder and copy them to the other machines that should be configured the same?  I plan to test this on a test server first.

Am I correct in assuming that the MMC snap-in for local policy is just used to view the settings and make changes?  The files used to make the changes on other machine will be those described above?

Thanks.
0
 
LVL 14

Expert Comment

by:setasoujiro
ID: 36562959
yes you should be able to do this, given they are all in a domain etc.
and for the MMC yes , it is just a layout that you save, not the content.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LVL 1

Author Comment

by:banjo1960
ID: 36563056
Thanks for the response.  I just have a coupl of more questions.

I read one of the links you sent to me a bit closer and checked another post, as well.  I see the registry.pol file under the machine folder being updated on the machine I am making changes on.

So I can copy that registry.pol to the machine I want to apply those changes to and those registry settings will be change?

Thanks.
0
 
LVL 14

Accepted Solution

by:
setasoujiro earned 250 total points
ID: 36564931
Yeah that's the 'policy' file. so copy that and see if it works , but just do it on a testserver anyhow to see the outcom, because i've not done this myself :)
0
 
LVL 1

Author Closing Comment

by:banjo1960
ID: 36566619
Thanks for the help!
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question