What's the best administration Software...
- Thread starter ViX
- Start date
Much of that is already built into your OS, check under Administrative Tools in Control Panel
Phantasm66
Posts: 4,909 +8
Per took the words right out of my mouth.
Start looking in the various tools in order to do this. And there are more tools on your Windows 2000 / XP machine than you think.
User Rights Assignment (i.e. what groups can do what) is in here:
start, run, mmc, add remove snap-in, local computer policy, computer configuration, local policies, user rights assignment.
You can control who is in what groups through computer management (right click my computer and choose manage.)
Start looking in the various tools in order to do this. And there are more tools on your Windows 2000 / XP machine than you think.
User Rights Assignment (i.e. what groups can do what) is in here:
start, run, mmc, add remove snap-in, local computer policy, computer configuration, local policies, user rights assignment.
You can control who is in what groups through computer management (right click my computer and choose manage.)
Phantasm66
Posts: 4,909 +8
Yes.
I am a tad rusty on this, but here is my best attempt at explaining what I think you are supposed to do:-
1)You need to create a custom mmc (Microsoft management console) for yourself.
-Go to start, run, type mmc and hit return.
-File – add/remove snap in
-Add
-Add standalone Snap in list appears.
-Add security Configuration and Analysis
-Add Security Templates
-Once you have an mmc that has these snaps ins, save the mmc by going to file, save as. Place the file somewhere you will be able to get it, or even just leave it at the default saving location, which is the admin tools folder I think. Give it a good name.
2)Create a custom security template
-Expand Security templates snap in
-right click compatws (if creating a template for a workstation, the others are for servers and domain controllers, apart from hisecws and securews, which you should use instead of compatws if you desire more security or high security – remember that more security means more things will potentially not work…)
-select save as, and save a copy of the template you want to base your new template on to the same directory that the other templates are in (i.e. the default that save brings you to)
-The view will refresh, and you will see a list of templates which now contains the name of the new template that you just created.
-There are many things that you can change, however I would only urge you to do so when you know what effect that change will have. Certainly don’t mess around with anything called Kerberos or anything like that.
-The stuff you are looking for is located your template’s local policies section, inside user rights assignment. You will see a series of actions and abilities to which you can assign groups that do these things. Make what changes you want to experiment with or use.
-When you are finished, save the template again.
-You might want to save another copy to a floppy disk or something if you are going to use this template on another computer.
3)To apply a security template to a computer
-Duplicate the custom made mmc on the new computer if needed (repeat step 1)
-Expand Security Configuration and Analysis snap in
-Right click Security Configuration and Analysis
-Select Import template
-Select your custom made security template (that you created in step 2)
- Right click Security Configuration and Analysis
-Select Configure Computer Now
-Just accept the default log file location.
-Window will appear with “Configuring Computer Security” – may take a few moments.
I am a tad rusty on this, but here is my best attempt at explaining what I think you are supposed to do:-
1)You need to create a custom mmc (Microsoft management console) for yourself.
-Go to start, run, type mmc and hit return.
-File – add/remove snap in
-Add
-Add standalone Snap in list appears.
-Add security Configuration and Analysis
-Add Security Templates
-Once you have an mmc that has these snaps ins, save the mmc by going to file, save as. Place the file somewhere you will be able to get it, or even just leave it at the default saving location, which is the admin tools folder I think. Give it a good name.
2)Create a custom security template
-Expand Security templates snap in
-right click compatws (if creating a template for a workstation, the others are for servers and domain controllers, apart from hisecws and securews, which you should use instead of compatws if you desire more security or high security – remember that more security means more things will potentially not work…)
-select save as, and save a copy of the template you want to base your new template on to the same directory that the other templates are in (i.e. the default that save brings you to)
-The view will refresh, and you will see a list of templates which now contains the name of the new template that you just created.
-There are many things that you can change, however I would only urge you to do so when you know what effect that change will have. Certainly don’t mess around with anything called Kerberos or anything like that.
-The stuff you are looking for is located your template’s local policies section, inside user rights assignment. You will see a series of actions and abilities to which you can assign groups that do these things. Make what changes you want to experiment with or use.
-When you are finished, save the template again.
-You might want to save another copy to a floppy disk or something if you are going to use this template on another computer.
3)To apply a security template to a computer
-Duplicate the custom made mmc on the new computer if needed (repeat step 1)
-Expand Security Configuration and Analysis snap in
-Right click Security Configuration and Analysis
-Select Import template
-Select your custom made security template (that you created in step 2)
- Right click Security Configuration and Analysis
-Select Configure Computer Now
-Just accept the default log file location.
-Window will appear with “Configuring Computer Security” – may take a few moments.
Phantasm66
Posts: 4,909 +8
As an additional last step, it may be desireable to review the log file which you will see displayed, to see if there have been any problems.
Its usually a good idea to make a backup of the security template.
Also, this stuff is good to know because the security policy on a machine can get corrupted, and you can just restore it from one of the premade templates that Microsoft supplies.
Its usually a good idea to make a backup of the security template.
Also, this stuff is good to know because the security policy on a machine can get corrupted, and you can just restore it from one of the premade templates that Microsoft supplies.
Phantasm66
Posts: 4,909 +8
I've just tried the above, and it works fine!
Similar threads
Latest posts
-
Walmart prepares for a future where AI agents do the shopping- Thrackerzod replied
