Click here to get back home

Security configuration template

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Security configuration template Bob Sullivan 03-21-2006
Get Chitika Premium
Posted by Bob Sullivan on March 21, 2006, 3:51 pm
Please log in for more thread options
Hi,

Does anyone know the syntax of the Security Configuration Templates to
extend it to add a new registry key that has a specified default value i.e.
the (Default) value in regedit. The intention being I can deploy it through
a GPO to HKEY_CLASSES_ROOT similar to the following (exported to a .reg
file) format:

[HKEY_CLASSES_ROOT\Drive\shell\example\command]
@="Example"

Cheers,
Bob



Posted by Roger Abell [MVP] on March 21, 2006, 8:37 pm
Please log in for more thread options
There are a couple of ways to do this.
One, perhaps the most common is to author a custom
administrative template, while a less common way is to
alter what is displayed in the Security Settings area by
editing and recompiling secregvl.inf file.
The first way you should be able to search out quite a
few writeups about, the second is described in a few
places, such as the recent revs of the security guides
for XP and W2k3.


> Hi,
>
> Does anyone know the syntax of the Security Configuration Templates to
> extend it to add a new registry key that has a specified default value
> i.e. the (Default) value in regedit. The intention being I can deploy it
> through a GPO to HKEY_CLASSES_ROOT similar to the following (exported to a
> .reg file) format:
>
> [HKEY_CLASSES_ROOT\Drive\shell\example\command]
> @="Example"
>
> Cheers,
> Bob
>



Posted by Bob Sullivan on March 22, 2006, 3:39 am
Please log in for more thread options
Roger,

Thanks for the feedback, I had previously created my own custom template inf
file which works fine to create a new REG_DWORD/REG_SZ etc. But I can't seem
to find the syntax anywhere to create a new Key that has a default value.
Any ideas or pointers would be appreciated.

Bob

> There are a couple of ways to do this.
> One, perhaps the most common is to author a custom
> administrative template, while a less common way is to
> alter what is displayed in the Security Settings area by
> editing and recompiling secregvl.inf file.
> The first way you should be able to search out quite a
> few writeups about, the second is described in a few
> places, such as the recent revs of the security guides
> for XP and W2k3.
>
>
>> Hi,
>>
>> Does anyone know the syntax of the Security Configuration Templates to
>> extend it to add a new registry key that has a specified default value
>> i.e. the (Default) value in regedit. The intention being I can deploy it
>> through a GPO to HKEY_CLASSES_ROOT similar to the following (exported to
>> a .reg file) format:
>>
>> [HKEY_CLASSES_ROOT\Drive\shell\example\command]
>> @="Example"
>>
>> Cheers,
>> Bob
>>
>
>



Posted by Roger Abell [MVP] on March 22, 2006, 8:35 am
Please log in for more thread options
OK, now I get the full meaning of your post, and yes, I have not tried
to do that in GP's methods.
So the (unnamed) values treated as type Reg_Sz that are displayed
as (Default) and which get defined automatically upon definition of a
new key with regedit are just artifact of key creation through regedit ?

> Roger,
>
> Thanks for the feedback, I had previously created my own custom template
> inf file which works fine to create a new REG_DWORD/REG_SZ etc. But I
> can't seem to find the syntax anywhere to create a new Key that has a
> default value. Any ideas or pointers would be appreciated.
>
> Bob
>
>> There are a couple of ways to do this.
>> One, perhaps the most common is to author a custom
>> administrative template, while a less common way is to
>> alter what is displayed in the Security Settings area by
>> editing and recompiling secregvl.inf file.
>> The first way you should be able to search out quite a
>> few writeups about, the second is described in a few
>> places, such as the recent revs of the security guides
>> for XP and W2k3.
>>
>>
>>> Hi,
>>>
>>> Does anyone know the syntax of the Security Configuration Templates to
>>> extend it to add a new registry key that has a specified default value
>>> i.e. the (Default) value in regedit. The intention being I can deploy it
>>> through a GPO to HKEY_CLASSES_ROOT similar to the following (exported to
>>> a .reg file) format:
>>>
>>> [HKEY_CLASSES_ROOT\Drive\shell\example\command]
>>> @="Example"
>>>
>>> Cheers,
>>> Bob
>>>
>>
>>
>
>



Posted by Bob Sullivan on March 22, 2006, 2:56 pm
Please log in for more thread options
Roger,

That's exactly what I meant, but should have explained with a bit more
clarity :)

Can anyone tell me if this is possible or suggest alternative methods
(without using a 3rd party product or scripting a logon script to add a .reg
file)?

Andrew

> OK, now I get the full meaning of your post, and yes, I have not tried
> to do that in GP's methods.
> So the (unnamed) values treated as type Reg_Sz that are displayed
> as (Default) and which get defined automatically upon definition of a
> new key with regedit are just artifact of key creation through regedit ?
>
>> Roger,
>>
>> Thanks for the feedback, I had previously created my own custom template
>> inf file which works fine to create a new REG_DWORD/REG_SZ etc. But I
>> can't seem to find the syntax anywhere to create a new Key that has a
>> default value. Any ideas or pointers would be appreciated.
>>
>> Bob
>>
>>> There are a couple of ways to do this.
>>> One, perhaps the most common is to author a custom
>>> administrative template, while a less common way is to
>>> alter what is displayed in the Security Settings area by
>>> editing and recompiling secregvl.inf file.
>>> The first way you should be able to search out quite a
>>> few writeups about, the second is described in a few
>>> places, such as the recent revs of the security guides
>>> for XP and W2k3.
>>>
>>>
>>>> Hi,
>>>>
>>>> Does anyone know the syntax of the Security Configuration Templates to
>>>> extend it to add a new registry key that has a specified default value
>>>> i.e. the (Default) value in regedit. The intention being I can deploy
>>>> it through a GPO to HKEY_CLASSES_ROOT similar to the following
>>>> (exported to a .reg file) format:
>>>>
>>>> [HKEY_CLASSES_ROOT\Drive\shell\example\command]
>>>> @="Example"
>>>>
>>>> Cheers,
>>>> Bob
>>>>
>>>
>>>
>>
>>
>
>



Similar ThreadsPosted
Security Template vs SCW November 2, 2006, 11:59 am
Security Configuration Advice December 20, 2005, 3:00 am
Security Configuration Wizard: 2nd try August 2, 2006, 9:44 am
Security Configuration Wizard (SCW) March 1, 2007, 2:35 pm
security template in .ini file? December 3, 2005, 10:08 pm
Re: How to install security configuration wizard December 30, 2005, 2:24 pm
Security Configuration Wizard question December 12, 2007, 8:59 pm
Security Configuration Wizard: Catastrophic Failure October 7, 2005, 8:30 am
Internet Explorer Enhanced Security Configuration April 7, 2006, 10:00 am
confusion about W2003 SP1 security configuration wizard July 28, 2006, 9:07 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap