The KB link below describes the process for IIS but the jist of the article
is what you need to know. BE SURE to back up your operating system and the
System State before you start using security templates so that you have a
backup plan. Windows 2003 Server allows you to use secedit to create a
"rollback" template ahead of time while W2K does not. I also recommend that
you do not modify default GPO's in an AD domain but create a new one to make
changes on. You can use secedit to reset "local" security policy back to
default defined settings but it will not roll back settings that are not
defined in the default security settings. --- Steve
