Shulou(Shulou.com)06/01 Report--

In this issue, the editor will bring you about how to apply windows 2003 group policies and security templates. The article is rich in content and analyzed and described from a professional point of view. I hope you can get something after reading this article.

This paper introduces the application of windows 2003 group policies and security templates, as described below.

Group Policy is used to configure multiple Microsoft Active Directory directory service users and computer objects from a single point. By default, the policy affects not only the objects in the container to which the policy is applied, but also objects in the child containers.

Group Policy contains security settings under computer configuration, Windows Settings, Security Settings. You can complete the configuration of these settings by importing preconfigured security templates into the policy.

One application group policy

The following steps show how to apply group policy and how to add security groups to user Rights assignment.

Apply group policy to an organizational unit or domain

1. Click start, click Administrative tools, click Active Directory users and computers, and open Active Directory users and computers.

two。 Highlight the relevant field or organizational unit, click the actions menu, and choose Properties.

3. Select the Group Policy tab.

Note: multiple policies can be applied to each container. These policies are processed up from the bottom of the list. If there is a conflict, the policy applied by * * will take precedence.

4. Click New to create a policy and give it a meaningful name, such as Domain Policy.

Note: click the options button to configure the disable overrides setting. Disable overrides is configured for each individual policy, not for the entire container, and Block Policy inheritance is configured for the entire container. If the prevent overrides and prevent policy inheritance settings conflict, the prohibit overrides setting takes precedence. To configure Block Policy inheritance, select the check box in the OU property.

Group policy can be updated automatically, but to start the update process immediately, use the following GPUpdate command at the command prompt: GPUpdate / force

Add a security group to user Rights assignment

1. Click start, click Administrative tools, click Active Directory users and computers, and open Active Directory users and computers.

two。 Highlight the relevant OU (such as member servers), click the actions menu, and select Properties.

3. Click the Group Policy tab, select the relevant policy, such as member Server baseline Policy, and then click Edit.

4. In the Group Policy object Editor, expand computer configuration, Windows Settings, Security Settings, Local Policy, and then highlight user Rights assignment.

5. In the right pane, right-click the relevant user rights.

6. Select the define these policy settings check box, and click add users and groups to modify the list.

7. Click OK.

Second, import security templates into Group Policy the following steps show how to import security templates into Group Policy.

Import security templates

1. Click start, click Administrative tools, click Active Directory users and computers, and open Active Directory users and computers.

two。 Highlight the related field or OU, click the actions menu, and choose Properties.

3. Select the Group Policy tab.

4. Highlight the relevant policy and click Edit.

5. Expand computer configuration, expand Windows Settings, and then highlight Security Settings.

6. Click the actions menu and choose Import Policy.

7. Navigate to\ Security Guide\ Job Aids, select the relevant template, and click Open.

8. In the Group Policy object Editor, click the File menu and choose exit.

9. In the container properties, click OK.

Use Security configuration and Analysis

The following steps show how to use Security configuration and Analysis to import, analyze, and apply security templates.

Import security templates

1. Click start, click run. Type mmc in the Open text box, and then click OK.

two。 In the Microsoft Management console, click File and select add / remove snap-ins.

3. Click add to highlight Security configuration and Analysis in the list.

4. Click add, click close, click OK.

5. Highlight Security configuration and Analysis, click the actions menu, and select Open Database.

6. Type a new database name, such as Bastion Host, and click Open.

7. In the Import template interface, navigate to\ Security Guide\ Job Aids and select the relevant template. Click Open.

Analyze the imported template and compare it with the current settings

1. Highlight Security configuration and Analysis in the Microsoft snap-in, click the actions menu, and select analyze computer now.

two。 Click OK to accept the default error Log File path.

3. After completing the analysis, expand the node title to study the results.

Apply security template

1. Highlight Security configuration and Analysis in the Microsoft snap-in, click the actions menu, and select configure computer now.

two。 Click OK to accept the default error Log File path.

3. In the Microsoft management console, click File, and then select exit to close Security configuration and Analysis.

It is hoped that the introduction to the application of windows 2003 group policies and security templates will be helpful to the reader.

The above is the application of windows 2003 group policies and security templates shared by the editor. If you happen to have similar doubts, please refer to the above analysis. If you want to know more about it, you are welcome to follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.