Microsoft Windows Server 2003 (70-290) Tutorials
Managing Security / Deploying a Custom Security Template
Visitors to VTC.com will be able to view all introductory videos for each training course.
Free Trial Members will gain access to first three chapters for each training course.
Full Access Members have full access to VTC.com�s entire library of video tutorials.
Learn More
Subtitles of the Movie (Microsoft Windows Server 2003 (70-290) / Managing Security / Deploying a Custom Security Template)
We need to remember that security template flip a lot of switched in a hurry. But they do not necessarily overlay everything about a computer. When I said it is not necessarily depends in how it is rolled out. If we change all of the local settings with the security template then, we could totally replace the security setting on a computer. Before we roll out a custom security template with group policy, with just change in it then what happens is it merges with the local security settings on computers. So, we can create a security template that just makes a few little changes that we want to make or may be in which case we pretty much want to start of blank slate and make the changes that we want to make. Or may be there is security template already that we would like to use but we need to make just a few little changes to it. Or may be we can use security domain controller if it just had few little changes to it. In which case what we want to do is we want to take one of these predefined templates and we just want to tweak little bit. We can use the tools to do that as well. So, let us go to the tools and let us take a look how we are going to do this. So, we are going to click on start and then on run and then MMC, press enter. This takes us to Microsoft Management Console. We can name these consoles save these consoles, share these consoles, we will be talking more about Microsoft Management console later. We will click on file and add a new snap-in click on add we are going to security templates. Snap-in 2. Click on add, close that up. So we have got a security template tool. Let us go ahead and open this up as we can see we have all other different templates of which we spoke. So if we wanted to use for example secured domain controller we could use it as it is. We will look at the account policies here, the password policies, 24 **, 42 days maximum password age minimum password age 2 days, account lockout policies. All that is set because that is a template that is already set. If we wanted to tweak this and use it for something else for another words make some changes to this, and then roll out almost this then we could save this in another file. So if you right click and security save and then save as just as, just as if we are going to save a file in word or power point or excel we would do the same thing. So may be we can call this Bill's secure dc and click on save. So now we have got Bill's secure dc but notice that we still have secure DC. So now we are going to make our changes in Bill security DC and we can roll it out as well. And take a look at how to do that in just a little while. Now if we just want to start of with a blank slate. We do not want to have any switches flipped here at all. We do that as well. Right click on windows security template and then click on new template and just give our new template a name and I am going to call it newtemp, click on ok and press enter. So now I have new template but let us take a look at newtemp's account policies. Look at the password policies totally undefined. What about lockout policy, not defined. In fact nothing is defined in this template. So anything that I define in this template is defined for the purpose of merging with some other kind of security. Another words there is already a template that is locally controlled on a computer. What I am going to do is I am going to use this template to make just a few other changes to add something it does not have, or may be just change a few little settings but other then that whatever is controlling it now going to stay in place. So you can see we can use out security templates in lot of different ways. One way is we can use our security template tools is to test the settings to apply and to test the settings. So in our next section take a look at how we apply these settings how we flip the switches and look at how, we can test to make that we are getting what we think we are getting. That is next.
Tutorial Information
| Course: | Microsoft Windows Server 2003 (70-290) |
| Author: | Bill Ferguson/Certified Instructor |
| SKU: | 33497 |
| ISBN: | 1932072918 |
| Release Date: | 2004-06-03 |
| Duration: | 8.5 hrs / 107 lessons |
| Captions: | No |
| Compatibility: |
Vista/XP/2000, OS X, Linux QuickTime 7, Flash 8 |
VTC Sign up & Benefits
- Unlimited Access
- 81,350 Video Tutorials (14,200 free)
- Video Available as Flash or QuickTime
- Over 715 Courses
- $30 for One Month Access
- Multi-User Discounts Available
