|
Posted by Roger Abell [MVP] on December 8, 2005, 10:24 pm
Please log in for more thread options Note that applying setup security.inf to a machine that has been
configured post-install is not really a safe, nor desirable operation.
I recommend that one use the Security Configuration and Analysis
snapin to determine what changes the use of a template would
cause. Then, before using such a template, where there is concern,
make a copy of the template but alter its values based on the
analysis so that the template's effects may be simply reversed by
use of the second template.
In effect you have, before applying either, two templates, each with
the same set of policies. Analyzing with one shows no difference
from the existing system state. Analyzing with the other shows what
will happen. If the two do in fact have all of the same policies in
them, just with different values, then you have ability to do a reversible
change (provided you do not totally clobber the system, bsod it, or
lock all admins out, etc.).
>I am trying to use some of the MS security templates for testing. Is there
>a way to get the machine back to windows 2003 server default install after
>applying one of the templates?
>
| 
XML Sitemap