Security Template Problem

  • Thread starter Thread starter gemel
  • Start date Start date
G

gemel

I am applying both file and registry permissions for an application
running on a Windows 2003 Server by using a template imported into a
Group Policy object. I now wish to return the registry settings to
those inplace prior to the linking of this new GPO. Can I achieve this
by simply unlinking the GPO and then waiting until the server settings
have updated?

What woould be the effect of simply deleting the GPO?

Regards

Gemel
 
If you delete or unlink the gpo all settings previous to the application of
this gpo should be re-established. That is the beauty of a gpo.
 
Paul said:
If you delete or unlink the gpo all settings previous to the application of
this gpo should be re-established. That is the beauty of a gpo.
Click to expand...

Where exactly would those old settings be stored?? And can there be more than
1 set? If so, how would the system know which set to restore? Do they come
from the local security policy?
 
That mechanism specifically doesn't apply to Win2k's security policy in
general and specifically for file and registry security settings going
forward. If you remove those settings from GP, they will remain on the
domain clients that those settings applied on.

You might be able to reconstruct what those permissions were by examining
%windir%\security\templates\setup security.inf. For DCs it's named DC
security.inf.

N
 
Good point. Those are definitions set up and forced upon via user defined
settings.

--

Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top