RE: Problems importing template and others..



hi,
check this link to import a predefined security template into GPO:
http://technet2.microsoft.com/WindowsServer/en/library/e4026462-791d-43ff-adb1-ae074feb37ea1033.mspx?mfr=true
--
Dragos CAMARA
MCSA Windows 2003 server


"UWRFREPORTER04" wrote:

My main problem is how do I apply the template to my entire domain group
policy or doesn't it work that way? There aren't any items in my domain
controllers OU, expect for the server.

There are may settings in the local security settings, specifically the user
rights assestement and security options. I want to use the template securedc
to generalize my settings and adjust anything after the fact. We are also a
small business (25 employees) and want to make a group policy for everyone,
exept 1 department that would have it's own OU.

So the settings that took affect from the template only affect the domain
controllers, but not the rest of the domain? Meaning if only affected the
server that acts as the domain controller? Is that how things are typically
done and not through the default group policy?

As for mapping and connecting to network drives, it appears to be a browser
issue, but not sure what's causing it. I can go to the map network drives
folder and manually type in \\srv06\shared. That works, but I can't browse
through the network, I can't browse to map a network drive as I normally have
done in the past with NT. I do have netbios over tcp/ip enable on both my
server and target computer. I don't have wins enabled yet and wasn't sure if
that's necessary??

I"m able to browse through the network logged in as my self (domain user) if
i'm logged on the server, so I don't think it's a permission issue, but a
browser issue. What could be causing this?

"Dragos CAMARA" wrote:

hi,
1. if you import on a domain controller a security template will be applied
on that computer/domain controller, will not "propagated" on domain
2.default domain policies will be default policies for all computers/users
on that domain, default domain controller policies will be applied only to
domain controllers.
3.did you put a $ sign after the name of share?if you do that map with the
complelty name including the $ sign
check the DNS settings on client computer maybe it is pointing somewhere
else(it works if you put the IP of server instead of name of server in the
share path?)
--
Dragos CAMARA
MCSA Windows 2003 server


"UWRFREPORTER04" wrote:

I have a few questions.

1- I'm trying to import a domain controller security template and the
settings aren't being applied. I analyze the computer, then configure it and
it makes changes in the msc, but not on default domain policy.

2- What is the difference between the default domain policy and the default
domain controllers policy?

3- This may or may not be related to group policy. I created a shared
folder on my server and when I log on to another pc, it won't let me map a
network drive and even allow me access. It basically says serverx is not
accessible, you might not have the permission to use this network resource.
I am in the administrators group on the server, added myself to the local pc
as a member of the administrators group, there are full permissions on the
shared folder. I am able to map the drive if I'm on the server, but not
another pc. Is this a gp issue or am I missing something??
.



Relevant Pages

  • RE: Problems importing template and others..
    ... My main problem is how do I apply the template to my entire domain group ... controllers OU, expect for the server. ... small business and want to make a group policy for everyone, ... if you import on a domain controller a security template will be applied ...
    (microsoft.public.windows.group_policy)
  • Re: GPO - Access denied after changing a GP setting
    ... This may render some server applications to fail. ... y Unable to open the GPO due to access denied. ... This tool was unable to re-create the EFS Certificates in the Default D omain Policy GPO Access is denied. ... You are about to restore Default Domain controller policy for the following domain Do you want to continue: ...
    (microsoft.public.windows.server.security)
  • Re: GPO - Access denied after changing a GP setting
    ... You are about to restore Default Domain policy and Default domain Controller po ... This may render some server applications to fail. ... Unable to open the GPO due to access denied. ... You are about to restore Default Domain controller policy for the following domain ...
    (microsoft.public.windows.server.security)
  • Re: Which Server 03 best suits my needs?
    ... your FTP server is also domain controller. ... do steps 2 and 3 in Default Domain controller policy. ...
    (microsoft.public.windows.server.setup)
  • Re: Microsoft Security & Configuration Tool (MSCT)
    ... > install into the server become problem. ... How to undo the security configuration that I had already applied ... basicsv.inf is the Domain Controller Security Policy, ...
    (microsoft.public.security)