|
Welcome to
NetworkCert.NET
Aids and Tools for Networking
Certifications
Security Templates
back to top
These default Windows 2000 security
settings are applied only to systems that have a clean installation to an NTFS
file system partition. Copies of these files are stored in the
systemroot\inf folder. The applied or modified template is stored in
systemroot\security\templates as "setup security.inf"
| Template File |
Computer Role |
| deflwk.inf |
Windows 2000 Professional |
| defltsv.inf |
Windows 2000 Servers |
| defltdc.inf |
Windows 2000 Domain Controllers |
Default settings are not applied under the
following circumstances:
Windows 2000 computers upgraded from Windows NT 4.0
Systems using the FAT or FAT32 file system
The following is a table of the templates that
can be used to configure upgraded computers or modify the existing default
templates. These templates are located in the
systemroot\security\templates folder. Apply these templates from the
Security Configuration and Analysis snap in or from the command line with
SECEDIT.
| Template File |
Computer Role |
Description |
| basicwk.inf |
Windows 2000 Professional |
Basic security
templates |
| basicsv.inf |
Windows 2000 Servers |
| basicdc.inf |
Windows 2000 Domain Controllers |
| notssid.inf |
Windows 2000 Servers
Windows 2000 Domain Controllers
|
Removes the terminal server SID
from all file systems and registry |
| dc security.inf |
Windows 2000 Domain Controllers |
Registry and file settings used
for domain controllers |
| securews.inf |
Windows 2000 Professional |
Increased security
for areas of the OS not covered by permissions. |
| securedc.inf |
Windows 2000 Domain Controllers |
| hisecws.inf |
Windows 2000 Professional |
Increases security
defined in the secure template. |
| hisecdc.inf |
Windows 2000 Domain Controllers |
| ocfilessw.inf |
Windows 2000
Professional Windows 2000 Servers
Windows 2000 Domain Controllers |
Increases the local
security for optional components. |
| ocfiles.inf |
You can also modify the registry settings for
any security template by modifying or adding to SCEREGVL.INF configuration file
in the systemroot\inf folder. (Instructions are in the file). Once
modified, register SCECLI.DLL so that these settings appear in the Security
Configuration Toolset.
|