|
Posted by Jesper on December 21, 2006, 4:20 pm
Please log in for more thread options Not really. The built in templates should never be used. They are
inappropriate for just about every purpose. They are not designed to a
specific threat model. The likelihood that they will meet your threat model
is very low. You should use the security guides to develop a security
strategy that meets your needs. The one-size-fits-all approach that the
built-in templates were designed for does not work. SCW was actually designed
specifically to create a more customized approach to security.
"Leuchtflux" wrote:
> I guess, they mean that these security templates can be applied only
> when default security templates were allready installed. That these
> default security templates should be installed prior to installing such
> additional security templates as that highly secure template you're
> mentioning.
> Ryan Sanders wrote:
> > I am reading about the pre-defined security templates provided by
> > Microsoft in Windows 2003 and I am un-clear about something.
> >
> > The hisecdc.inf says "specify additional restrictions that are not
> > defined by the Secure templates"
> >
> > Does that mean that the hisecdc.inf includes all the settings from the
> > secure template OR does it mean that it only applies setting that are
> > above the secure template. Meaning I would have to apply the secure
> > template and then the hisec template to get the cumulative settings?
>
>
| 
XML Sitemap