Windows 2000 Administration in a Nutshell

Name

Local Security Policy

Synopsis

Apply a security template to a computer, configure the Local Security Policy on a computer, create a custom security template, and restore the default security settings on a computer.

Procedures

These procedures use either the Local Security Settings console, which is opened by:

Start → Programs → Administrative Tools → Local Security Policy

or a custom MMC console with one of the following snap-ins installed:

• Security Configuration and Analysis

• Security Templates

Each procedure later in this article indicates which console or snap-in to use.

If you want to directly modify the security settings of a member server or workstation belonging to a domain, you can do the following instead of using the Local Security Policy console:

Start → Run → mmc → OK → Console → Add/Remove Snap-in → Add → Group Policy → Add → select Local Computer as the Group Policy Object you want to modify (this is the default) → Finish → Close → OK

This creates a custom console with a Local Computer Policy node under the root node. Expand this node as follows:

Local Computer Policy → Computer Configuration → Windows Settings → Security Settings

Apply a Security Template to a Computer

There are several steps involved here. First you create a security-configuration database and specify a template to be imported into the database:

Open the Security Configuration and Analysis console → right-click Security Configuration and Analysis → Open database → specify a database name to create a new database ...