Lesson 2

Introducing Security Templates

10-17

15. A Save Security Templates dialog box appears, prompting you to save the changes

you made. Click Yes.

Lesson Review

The following questions are intended to reinforce key information presented in this

lesson. If you are unable to answer a question, review the lesson materials and try the

question again. You can find answers to the questions in the “Questions and Answers”

section at the end of this chapter.

1. You are the new administrator for an Active Directory network, and while it is

clear that someone has changed the security configuration of the network’s

domain controllers, your predecessor left no records of the exact changes he

made. Which of the following security templates should you apply to the domain

controllers to restore their default security settings, and then implement the high-

est possible level of security?

a. Compatws.inf and then Securedc.inf

b. Securedc.inf and then Hisecdc.inf

c. Hisecdc.inf and then Setup Security.inf

d. DC Security.inf and then Hisecdc.inf

e. Setup Security.inf and then Securedc.inf

2. Why should you not use group policies to apply the “Setup Security.inf” template

to a computer?

3. What are the four ways to apply a security template to a computer running Win-

dows Server 2003 with SP1?

Lesson Summary

■

A security template is a collection of configuration settings stored as a text file with

an .inf extension.

■

Security templates contain basically the same security parameters as Group Policy

Objects, including account, local, and event log policies, file system and registry

permissions, system service parameters, and restricted groups.