implementing security templates

Posted: 08-10-2007, 01:57 AM
Hi,

I am juan from argentina.

I have a task of implementing some bestion hosts in the DMZ so im
implementing windows 2003 servers with the most tighten security
template from microsoft.

the problem is that after I implemented the template nothing worked so
I tried to roll back to setup security.inf which is the default
security policy and still nothing workrd ! so like a stupid, I had to
reinstall the server...

I have two questions:
1. was I doing something wrong?
2. is there a tool which tells me why the application cant run after
the implementing the security policy? maybe a tool which tells me that
this or that registry key is blocked or a spacific registry key doesnt
have enogh permissions etc..?

thanks a lot !

Juan

Reply With Quote

Responses to "implementing security templates"

juanp
Guest
Posts: n/a
 
implementing security templates
Posted: 08-10-2007, 01:57 AM
Hi,

I am juan from argentina.

I have a task of implementing some bestion hosts in the DMZ so im
implementing windows 2003 servers with the most tighten security
template from microsoft.

the problem is that after I implemented the template nothing worked so
I tried to roll back to setup security.inf which is the default
security policy and still nothing workrd ! so like a stupid, I had to
reinstall the server...

I have two questions:
1. was I doing something wrong?
2. is there a tool which tells me why the application cant run after
the implementing the security policy? maybe a tool which tells me that
this or that registry key is blocked or a spacific registry key doesnt
have enogh permissions etc..?

thanks a lot !

Juan

Reply With Quote
Jesper
Guest
Posts: n/a
 
RE: implementing security templates
Posted: 08-10-2007, 02:12 AM
This doesn't seem like a Vista question.

Yes, you were trying to roll back a system's security settings to the
defaults. There is no way to do that. Setup Security.inf is just a log file
of settings that were made during setup, not the default settings. Some, but
not all, of the default settings are stored in dfltsrv.inf, but even that
won't get you back. I've discussed that before:
http://www.microsoft.com/technet/tec.../SecurityMyths.

Now, if you had used SCW instead, you could have rolled much of it back.

There are tools that can be used to troubleshoot the problem. One of the
better is LUA Buglight, but it is specifically designed to find low-privilege
problems. It may help. If not, I documented a process for doing exactly what
you want to do in Protect Your Windows Network:
http://www.amazon.com/exec/obidos/AS...otectyourwi-20.
---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/047...otectyourwi-20


"juanp" wrote:
> Hi,
>
> I am juan from argentina.
>
> I have a task of implementing some bestion hosts in the DMZ so im
> implementing windows 2003 servers with the most tighten security
> template from microsoft.
>
> the problem is that after I implemented the template nothing worked so
> I tried to roll back to setup security.inf which is the default
> security policy and still nothing workrd ! so like a stupid, I had to
> reinstall the server...
>
> I have two questions:
> 1. was I doing something wrong?
> 2. is there a tool which tells me why the application cant run after
> the implementing the security policy? maybe a tool which tells me that
> this or that registry key is blocked or a spacific registry key doesnt
> have enogh permissions etc..?
>
> thanks a lot !
>
> Juan
>
>
Reply With Quote
 
LinkBack Thread Tools Display Modes
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
Implementing a driver Lothar Baeurle Windows XP Embedded 5 11-30-2004 10:03 AM
Instructions for implementing RAM EWF without using temporary partition. Slobodan Brcin Windows XP Embedded 2 09-23-2003 05:48 PM
Can anybody explain in a simple way what the steps voor security templates are? XP PRO User Windows XP Setup 2 09-15-2003 04:35 AM
Can anybody explain in a simple way what the steps voor security templates are? XP PRO User Customize Windows XP 2 09-15-2003 04:35 AM
templates Martin Gonzalez Windows XP Accessibility 1 09-08-2003 07:56 PM