Administrators often configure security sentencing bills configure and security sentence in a GPO can
be tedious work especially when configuring firewall rules because of the number of rules and settings
that you need to configure security templates are files that you use to manage and configure security
settings on Windows based computers.
Depending on various categories of security settings the security templates consist of settings divided
into logical sections.
When you configure a security template you can use it to configure a single computer or to configure
multiple computers on a network.
You can configure and distribute security templates in several ways you can use SEC added dot exec command
line tool you can use it to compare the current configuration of a computer that is run on Windows Server
2016 or later to specific security templates.
You can also use security templates snap in.
You can use it to create a security policy by using these security templates and other way to configure
and distribute security templates is to use group policy you can use group policy to analyze and configure
computer sadness and to distribute specific security settings and of course you can use security compliance
manager you can use it to view security sentence comparisons to security baselines which are groups
of settings that are designed on Microsoft's security guards and best practices with its help you can
customize and import or export GPO big backups.
Now let's review each of these tools security templates snap in you can use it to configure security
settings and the following sections account policies.
This section includes password account lock out and Scarborough's version 5 policies local policies.
This section includes audit policies user write assignment and security options.
You won't log.
This section includes application least amount security went lock Saddam's restricted groups.
This section includes memberships of groups that have special rights and permissions system services.
This section includes start up and permissions for System Services registry.
This section includes permissions on registry keys and file system.
This section includes permissions for folders and files you can use this nappy in either to save the
INF dot info file to a known location or to make a note of the standard location of security templates
which is document security templates folder in the assigned in user risk profile.
The next tool is security compliance manager.
The security sentence for a computer consists of more than what you can configure and a security template.
Because of this using the security compliance manager to configure security might be a better option.
Microsoft updates the security compliance manager with new security baselines that you can download
and use in your own environment as is or change the sentence to adapt to the security needs of your
organization.
You can export the baselines you want to use at the GPO back up and then import and backup by using
either the JPM C or Windows power Shell.
For more information refer to security compliance manager or ACM.
And lastly you can import a security template into a GPO.
Once you have created your security template you can import the security template by doing the following
in the jeep PMC create a GPO.
Added the GPO and in the group policy management Ed go to the computer configuration policies windows
sentence security asset and section of the GPO right click security assistance and then click import
policy.
And in the import policy from dialog box select the security template file that you want to import and
then click open.
Please know that Djibril will now contain the security incidents configured in the security template.
Now in previous versions of Windows Server you could use the security configuration reserved to examine
Windows server configuration and then create a security policy based on that configuration.
You could then convert to the security policy to a GPO by using a command line.
The security configuration Vizard is no longer available in Windows Server 2016.
Next up we'll talk about managing administrative templates.
I'll see you there.