|
Posted by Steven L Umbach on June 4, 2006, 11:57 pm
Please log in for more thread options I don't doubt that. I know that services in particular will cause a lot of
problems. User rights are probably OK as are security settings though I
notice no remote registry paths are defined in setup security Security
Template and the password policy will allow blank passwords. The best
solution would be to try and figure out where the problem is if there is a
suspected loss in functionality in the operating system rather than reset
everything or if for some reason default settings are required to refer to
MS documentation or a known default install of the operating system. Of
course users in such predicament need to review their backup and
documentation procedures. --- Steve
> If I recall correctly, at one time when MS upleveled (for W2k3)
> the KBs describing this process they added a note that doing this
> was not recommended for W2k3.
> Also, when doing this people need to keep in mind that some
> things do not get touched.
>
>
>> Ordinarily I would say that is excellent advice but there is a problem
>> doing that with Windows 2003 server in that many important services will
>> be disabled such as workstation, server, PNP, protected storage, dns
>> client, and others. You should be able to see what I mean by examining
>> the setup security template in the mmc snapin for Security Templates. A
>> user could create a new security template and copy/paste everything but
>> services from the setup security template and then use that template and
>> refer to documentation in the Windows 2003 Server Security guide or
>> examine the services of a server in default configuration if they need to
>> reconfigure services. --- Steve
>>
>>
>>> Use the Security Configuration and Analysis snapin. Open mmc.exe and add
>>> the snapin. Right-click the Security Configuration and Analysis object
>>> in the tree pane and select 'open database'. Type some arbitrary name.
>>> Then it will prompt you for a security template. Select the template
>>> name "setup security.inf". This template contains the security settings
>>> applied during installation. When the template has loaded, right-click
>>> the Security Configuration and Analysis object again and select
>>> "Configure Computer Now". The settings in the template will be applied
>>> to you computer. If you want a way to roll back the changes, use
>>> secedit.exe from a command prompt with appropriate parameters.
>>>
>>
>>
>
>
| 
XML Sitemap