TechSpot

What's the best administration Software...

By ViX
Aug 20, 2003
  1. I'm looking for a software that will let me be able to add restrictions to Windows 2000 and/or XP user accounts i.e. "You do not have the proper privilege level to change this". Can any of you help me on this one?:p

    Thank you all in advance,
    ViX
     
  2. Per Hansson

    Per Hansson TS Server Guru Posts: 1,929   +186

    Much of that is already built into your OS, check under Administrative Tools in Control Panel
     
  3. Phantasm66

    Phantasm66 TS Rookie Posts: 5,734   +7

    Per took the words right out of my mouth.

    Start looking in the various tools in order to do this. And there are more tools on your Windows 2000 / XP machine than you think.

    User Rights Assignment (i.e. what groups can do what) is in here:

    start, run, mmc, add remove snap-in, local computer policy, computer configuration, local policies, user rights assignment.

    You can control who is in what groups through computer management (right click my computer and choose manage.)
     
  4. ViX

    ViX TS Rookie Topic Starter

    Using this tool can you...

    ...setup profiles and save them to a disk for later on implement on a completely different system?

    Thank you so much for the help you guys gave me so far.

    ViX.;)
     
  5. Phantasm66

    Phantasm66 TS Rookie Posts: 5,734   +7

    Yes.

    I am a tad rusty on this, but here is my best attempt at explaining what I think you are supposed to do:-

    1)You need to create a custom mmc (Microsoft management console) for yourself.

    -Go to start, run, type mmc and hit return.
    -File – add/remove snap in
    -Add
    -Add standalone Snap in list appears.
    -Add security Configuration and Analysis
    -Add Security Templates

    -Once you have an mmc that has these snaps ins, save the mmc by going to file, save as. Place the file somewhere you will be able to get it, or even just leave it at the default saving location, which is the admin tools folder I think. Give it a good name.

    2)Create a custom security template

    -Expand Security templates snap in
    -right click compatws (if creating a template for a workstation, the others are for servers and domain controllers, apart from hisecws and securews, which you should use instead of compatws if you desire more security or high security – remember that more security means more things will potentially not work…)
    -select save as, and save a copy of the template you want to base your new template on to the same directory that the other templates are in (i.e. the default that save brings you to)
    -The view will refresh, and you will see a list of templates which now contains the name of the new template that you just created.
    -There are many things that you can change, however I would only urge you to do so when you know what effect that change will have. Certainly don’t mess around with anything called Kerberos or anything like that.
    -The stuff you are looking for is located your template’s local policies section, inside user rights assignment. You will see a series of actions and abilities to which you can assign groups that do these things. Make what changes you want to experiment with or use.
    -When you are finished, save the template again.
    -You might want to save another copy to a floppy disk or something if you are going to use this template on another computer.

    3)To apply a security template to a computer

    -Duplicate the custom made mmc on the new computer if needed (repeat step 1)
    -Expand Security Configuration and Analysis snap in
    -Right click Security Configuration and Analysis
    -Select Import template
    -Select your custom made security template (that you created in step 2)
    - Right click Security Configuration and Analysis
    -Select Configure Computer Now
    -Just accept the default log file location.
    -Window will appear with “Configuring Computer Security” – may take a few moments.
     
  6. Phantasm66

    Phantasm66 TS Rookie Posts: 5,734   +7

    As an additional last step, it may be desireable to review the log file which you will see displayed, to see if there have been any problems.

    Its usually a good idea to make a backup of the security template.

    Also, this stuff is good to know because the security policy on a machine can get corrupted, and you can just restore it from one of the premade templates that Microsoft supplies.
     
  7. Phantasm66

    Phantasm66 TS Rookie Posts: 5,734   +7

    I've just tried the above, and it works fine!
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...