8.9. Final Thoughts
To know security, you need to know Group Policy. To that end, we've toured some of the major sights along the Group Policy security highway. From the "Default Domain Controllers Policy" and "Default Domain Policy" GPOs to Software Restriction Policies to Security Templates—a lot can be accomplished in there.
Walking up to a specific machine and applying local security sounds like a great, straightforward idea—until you have so many machines you couldn't possibly walk up to them all. This chapter covered some alternate methods for asserting your will across the network.
Use security templates for all types of machines. But if you're configuring Windows 2003/SP1 or newer machines, the new SCW is your new best friend.
Remember ...
Get Group Policy: Fundamentals, Security, and Troubleshooting now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
