Windows 2000 Administration in a Nutshell

Name

security policy

Synopsis

Configure a security policy, and create or import a security template.

Procedures

See security policy for information on different types of security policies.

Configure a Security Policy

You can edit the security settings in the Default Domain Policy on a domain controller for your domain by:

Start → Administrative Tools → Domain Security Policy → modify settings as desired

The preferred method, however, is to create custom Group Policy Objects (GPOs) linked to the domain and selected OUs using Active Directory Users and Computers. You then configure the security settings in each GPO as desired (see Group Policy for a description of these different settings) by opening the GPO (see Group Policy Objects (GPOs) in this chapter for how) and:

Computer Configuration → Windows Settings → Security Settings → modify settings as desired

Warning

Account Policies security settings only have an effect when they are configured in a GPO linked to a domain, not an OU.

Create a Security Template

To speed the process of configuring security settings, you can create a template containing predefined security settings. Windows 2000 includes a number of default templates that are described in Local Security Policy, but you can also create your own security templates using the Security Templates snap-in. Add this snap-in to a new or existing MMC console and do the following:

Right-click the template search path node → New Template → specify a name and description → OK → select and ...