Dear All, have rather belatedly got to this. Thanks for the posted replies on this.
this looks an excellent reference. it would seem that these are later versions of the templates made avialable through the security operations guide. could anyone point us to URL where these are available for download am just reveiwing the high security DC templates - I see that the user rights assignment references what i would assume to be well known SID's would anyone perhaps be able to point me to a reference wehere these are documented ?? Thanks for you help GT ----- Original Message ----- From: "Rick Kingslan" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, February 18, 2003 11:52 PM Subject: RE: [ActiveDir] security templates > Thanks, Bob! ;-) > > Rick Kingslan MCSE, MCSA, MCT > Microsoft MVP - Active Directory > Associate Expert > Expert Zone - www.microsoft.com/windowsxp/expertzone > > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Free, Bob > > Sent: Tuesday, February 18, 2003 5:26 PM > > To: [EMAIL PROTECTED] > > Subject: RE: [ActiveDir] security templates > > > > > > Funny, I was just looking at those :-] > > > > http://www.microsoft.com/technet/treeview/default.asp?url=/tec > hnet/security/issues/W2kCCSCG/W2kSCGcf.asp > > > > -----Original Message----- > > From: Rick Kingslan [mailto:[EMAIL PROTECTED] > > Sent: Tuesday, February 18, 2003 3:22 PM > > To: [EMAIL PROTECTED] > > Subject: RE: [ActiveDir] security templates > > > > > > Graham, > > > > Though I don't have a link to them in front of me at the > > moment, as you might recall, Microsoft submitted for and > > passed the Common Criteria. Microsoft (via SAIC) published a > > configuration and an administration guide that is a bit more > > current with templates, et. al. Look into those for your > > Security Configuration guidelines, in conjunction with the > > SecOps guides. > > > > Rick Kingslan MCSE, MCSA, MCT > > Microsoft MVP - Active Directory > > Associate Expert > > Expert Zone - www.microsoft.com/windowsxp/expertzone > > > > > > > > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] On Behalf Of > > Graham Turner > > > Sent: Tuesday, February 18, 2003 3:08 PM > > > To: [EMAIL PROTECTED] > > > Subject: [ActiveDir] security templates > > > > > > > > > very keen to leverage the templates for baselining DC > > > security and configuration distributed with the MS security > > > operations guide, > > > > > > it would seem that these would have been developed certainly > > > before SP3 (w2k by the way) which seems to have introduced a > > > number of additional services eg > > > > > > Automatic updates > > > Background Intelligent transfer service > > > > > > would anyone have a reference on what additional services are > > > added to the base w2k distribution and IDEALLY (says he being > > > a bit lazy !!) updated revisions of the security templates to > > > reflect a SP3 installation - > > > > > > if not i guess off to MMC i go !!! > > > > > > GT > > > > > > > > > List info : http://www.activedir.org/mail_list.htm > > > List FAQ : http://www.activedir.org/list_faq.htm > > > List archive: > > > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > > > > > > > List info : http://www.activedir.org/mail_list.htm > > List FAQ : http://www.activedir.org/list_faq.htm > > List archive: > > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > > List info : > > http://www.activedir.org/mail_list.htm > > List FAQ : http://www.activedir.org/list_faq.htm > > List archive: > > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
