- Security Policy Templates?
- Posted by Ben Blackmore on March 4th, 2004
Hi,
Is it possible to download different .adm files from Microsoft's site, for
security policy templates? I'd like to import one that is something along
the lines of 'Lightly Managed Desktop' as described in Microsoft's
'IntelliMirror Scenarios'.
Cheers
Ben
- Posted by Chriss3 on March 4th, 2004
Hi Ben, An administrative template (.adm) file. An .adm file defines the
property page the Group Policy Object Editor will display to allow the
administrator to manage its settings. The file also indicates the registry
location where the settings are stored. This means this are the default
settings you can define, but you define them as you need them apply. There
is no reason to cut down them and remove settings from the default
templates. You have how ever write own Administrative Templates.
--
Regards
Christoffer Andersson
No email replies please - reply in the newsgroup
"Ben Blackmore" <bjblackmore@nospam.hotmail.com> skrev i meddelandet
news:40475815$0$24211$cc9e4d1f@news.dial.pipex.com ...
- Posted by Chriss3 on March 4th, 2004
Please ignore the line "You have how ever write own Administrative
Templates." I mean you can how ever write own administrative templates for
customize settings to fit your needs.
--
Regards
Christoffer Andersson
No email replies please - reply in the newsgroup
"Chriss3" <noSpamHere@chrisse.se> skrev i meddelandet
news:%23niWbIhAEHA.3220@TK2MSFTNGP10.phx.gbl...
- Posted by Jimmy Andersson [MVP] on March 4th, 2004
Take a look at http://thethin.net/tsdownload.cfm for more policy templates.
Two good articles about .adm files:
Advanced topic: Creating custom .adm files:
http://www.microsoft.com/windows2000...oncepts_34.htm
To add or remove an Administrative Template (.adm file):
http://www.microsoft.com/windows2000...ddtemplate.htm
(URLs may be wrapped)
Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Directory Services
---------- www.qadvice.com ----------
"Ben Blackmore" <bjblackmore@nospam.hotmail.com> wrote in message
news:40475815$0$24211$cc9e4d1f@news.dial.pipex.com ...
- Posted by Ben Blackmore on March 5th, 2004
"Chriss3" <noSpamHere@chrisse.se> wrote in message
news:#niWbIhAEHA.3220@TK2MSFTNGP10.phx.gbl...
Oh, I see what you mean about .adm files, I didn't realise they were the
property pages, I thought they were files you could import that would change
all the settings, in the property pages, to that of the template.
Currently most of the settings in our OU are 'Not Configured', we now want
to start testing and deploying settings to lock down the workstations, but
there are so many different settings, I was hoping there would be a file I
could import that would set all the settings to recommended microsoft domain
security!
Ben
- Posted by Ben Blackmore on March 5th, 2004
Ah, I just figured out what I was trying to do, was confusing myself!
I remember once applying a security template (.inf).
Group Policy Object Policy > Computer Configuration > Windows Settings >
Security Settings > Import Policy
Then importing a standard workstation security policy, I was confusing
myself by thinking you could do it with the whole group policy!
Ben
