Customizing Security Templates

When you start to customize security templates, you must first determine whether you can work with an existing default or standard template as a foundation. (To get a better idea of what is included and targeted in the default security templates, see Chapter 5.) You have two options for working with security templates to create your own customized version: You can copy a default template, making changes to what is included in the original template, or you can create your own template from scratch.

Copying Templates

An excellent option that allows you to take advantage of existing configurations in a security template is to copy one of the default templates. This approach can save you a lot of effort and time.

First, be sure to pick the template that has the majority of the settings that you want to configure. (See Chapter 5 for a list of what each default security template covers.) Next, make a copy of the template using the Security Templates snap-in. To copy an existing template, follow these steps:

  1. Click Start, Run. In the Run dialog box, type mmc, and then click OK.

  2. Choose Add/Remove Snap-In from the File menu.

  3. In the Add/Remove Snap-In dialog box, click Add.

  4. Scroll down and select Security Templates from the list of available snap-ins, click Add, and then click Close.

  5. In the Add/Remove Snap-In dialog box, click OK.

  6. Find the security template that you want to copy in the Security Template snap-in list of templates, right-click the template, and click Save As.

  7. Type a new name for the security template, and click Save.

This procedure generates a new security template with the same settings as the original template you copied. Now you can make additional configuration changes within the newly copied template.

Creating New Security Templates

If the default security templates don’t include the settings you want, you can create a new security template from scratch instead of copying an existing template.

To create a new security template, follow these steps:

  1. In the Security Templates snap-in, right-click the C:WindowsSecurityTemplates node, and select New Template.

  2. Type a template name and a description for the security template.

  3. Click OK.

This generates a new security template that has no settings configured. Although this creates more work for you because you have to configure all of the settings, it is a straightforward way to ensure that you know which settings are configured within the template. After you make all of the required custom modifications in the template, it will be ready for deployment.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset