Custom Security Template

[stonetown]

Hello all,

Scenario:
WinXP machines in an NT domain, all XP client machines should have policies applied and be centrally managed, no AD, some Win2K member servers. This means that XP clients will have policies applied using NT domain controllers and XP templates are installed into NTconfig.pol and all works fine.

Problem:
Security settings are not included as part of the XP admin or system templates provided by Microsoft, so at this stage security is applied using local GPO, this defeats object of having centrally managed policies. Does anyone know of a way of quickly creating a template from the local security GPO in XP that can be added to NTconfig.pol, or know of any in existence as I'm sure someone must have found a solution to this problem already.

Thanks,

Tim.

 

[bcastner]

I am missing something here. Read the three sections from the WinXP Resource Kit documentation. I am not sure what in the templates, or the use of the Security Configuration and Analysis snap-in of the mmc, that seems to be missing for you.

http://www.microsoft.com/resources/...Windows/XP/all/reskit/en-us/prdd_sec_umgs.asp

 

[stonetown]

Thanks for the help, the security templates you refer to work at local GPO or GP in AD they won't work out of the box in NTconfig.pol (note that policies are applied to XP machines from an NT domain controller).

So my question still stands, has anyone successfully converted the XP security templates to a custom .adm which will work in NTconfig.pol??

Tim.

 

[bcastner]

The Technet article clearly states that the templates will work on NT 4 Domain controllers with Service Pack level 4 or higher.

I remain confused as to your issue.

 

[stonetown]

Yes you are correct, I should read the manual, thanks, I'll be trying it out next week!!

Tim.