Re: SBS Security Profile templates

Service Pack 1 for Windows Small Business Server 2003, Standard Edition
(Release Notes)
http://download.microsoft.com/download/d/5/b/d5be2c2c-b1cb-47f8-9235-8cf89820139e/Readme_std.htm
---------------------------------------
Do not run the Windows Server 2003 Security Configuration Wizard on Windows
Small Business Server 2003

The Security Configuration Wizard, which is included with Service Pack 1 for
Windows Server 2003, is not designed to work with Windows SBS. Running this
wizard can create conflicts with settings that are configured by Windows SBS
Setup.

To help secure a computer running Windows SBS, it is recommended that you
accept the default settings during Setup and then run the Configure E-mail
and Internet Configuration Wizard.

If you run the Security Configuration Wizard on Windows Small Business
Server 2003 and experience problems, use the rollback feature in the
Security Configuration Wizard to undo the changes.
---------------------------------------

--
Merv Porter [SBS-MVP]
============================

"JoeF" <JoeF@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:454C1364-31FF-46C0-973D-67A7E3A0E74C@xxxxxxxxxxxxxxxx
It's called the Security Configuration Wizard.

I'm sorry...I should've been more specific. I am talking about the
security
configuration wizard tool that you install from the ADD/REMOVE WINDOWS
COMPONENTS screen. It really tightens up security by blocking ports,
services, and applications you don't need for your unique server role. -
It
is a very useful tool however; I know there's templates out there that
make
it a bit easier than answering all the questions the wizard asks.

thanks!

-JoeF


"Robert Li [MSFT]" wrote:

Hi Joe,

Thanks for posting in our newsgroup.

Please let me know the following to make the situation more clearly:

1. What is Windows Security Policy tool you refer to here? Is that Group
Policy Management? That was installed already during the installation of
SBS.

2. What is the "SBS Security Profile templates", is that the User
Templates?

If you refer to Group Policy templates, you can check in c:\windows\inf
folder. By default there are the following templete files: conf.adm,
inetres,adm, system.adm, wmplayer.adm, wuau.adm. If they are there,
please
add the templates manually:

1. Open Group Policy you edited.
2. Migrate to User Configuration/ Administrative Templates.
3. Right click Administrative Templates and select Add/Remove Templates.
4. Select system and click Remove.
5. Right click Administrative Templates and select Add/Remove Templates.
6. Click ADD, choose template file name in c:\windows\inf.
7. Click OK.

If you can't find them, please copy the file from server of the same
service pack level.

More info:

Group Policy Template Behavior in Windows Server 2003
http://support.microsoft.com/kb/316977

I am looking forward to hear from you.

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the
corresponding
newsgroups so that they can be resolved in an efficient and timely
manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no
rights.

--------------------
<Thread-Topic: SBS Security Profile templates
<thread-index: AcgaTdfNdyFOm+DOR/WTjv4BYZlezg==
<X-WBNR-Posting-Host: 207.46.192.207
<From: =?Utf-8?B?Sm9lRg==?= <JoeF@xxxxxxxxxxxxxxxxxxxxxxxxx>
<Subject: SBS Security Profile templates
<Date: Mon, 29 Oct 2007 10:05:01 -0700
<Lines: 8
<Message-ID: <019C62C7-AFCE-4AB9-8430-19BC7960AB84@xxxxxxxxxxxxx>
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 7bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
<Newsgroups: microsoft.public.windows.server.sbs
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:72453
<NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<After installing the Windows Security Policy tool, I became aware that
<there's Small Business Server templates out there that I can use. Is
anyone
<famliar with these templates and can give me a reliable source or link
to
<download them?
<
<Thank you for your time.
<
<-JoeF
<




.

Relevant Pages

  • Re: Certificate template modifying
    ... but you should still be able to edit them on Standard Server, ... to edit the templates, were you a Domain or Enterprise Admin or Local Admin? ... >>2003 Enterprise setup of Windows CA. ... >>> Version 2 certificate templates can only be used to ...
    (microsoft.public.windows.server.security)
  • Re: Viewing templates is EXTREMELY slow - HELP!
    ... What stumps me is with Windows 2000 Pro installed it's fast. ... Word looks at the Templates folder for a list of available templates ... I'm not on a server, ... >> We upgraded the workstations to Windows XP and upgraded Office ...
    (microsoft.public.word.newusers)
  • Re: Win2k3 "Security Guide" templates applicable during 2k to 2k3 migration?
    ... Edgardo this what not an easy question to answer but its a good question. ... How ever the question is if Windows 2000 Server can be locked down as hard ... > Controllers be Windows 2003 in order for the templates to be applied? ...
    (microsoft.public.win2000.active_directory)
  • Re: Firewall and RPC
    ... Does the SCW comes along with Windows 2003 Server OR I have downloaded from ... My advice would be to use SCW (Security Configuration Wizard) to do this. ... Microsoft MVP - Windows Security ...
    (microsoft.public.windows.server.general)
  • Viewing templates is EXTREMELY slow - HELP!
    ... We had all of our templates for our legal secretaries stored on their ... local machines. ... all to our server ... The client workstations were running Windows 2000 Pro and Office 2000. ...
    (microsoft.public.word.newusers)