Registry based policies/preferences; Security Templates vs. Administrative Templates

Registry based policies/preferences; Security Templates vs. Administrative Templates

Post by Sean Krulewitc » Wed, 05 Jun 2002 10:21:58



Greetings,

I'm trying to get feedback and opinions from others on when they feel its
appropriate to use security templates (.inf) to push registry based
policy/preferences as opposed to using administrative templates (.adm).  In
this case, I'm referring to settings that are not already defined by a
standard adm or inf template.  Both mechanisms allow for custom setting
extensions and both can be link to group policy.

I've run into at least one situation where security templates seemed like
the only choice because the data types were REG_MULTI_SZ, but I am
interested in other reasons to use one over the other.  Obviously, security
templates are typically used when the setting is a true security setting,
but again this mechanism can be extended to deal with just about any
setting.

Thanks,
-Sean

 
 
 

Registry based policies/preferences; Security Templates vs. Administrative Templates

Post by Sean Krulewitc » Wed, 05 Jun 2002 10:25:00



Quote:> Greetings,

> I'm trying to get feedback and opinions from others on when they feel its
> appropriate to use security templates (.inf) to push registry based
> policy/preferences as opposed to using administrative templates (.adm).
In
> this case, I'm referring to settings that are not already defined by a
> standard adm or inf template.  Both mechanisms allow for custom setting
> extensions and both can be link to group policy.

> I've run into at least one situation where security templates seemed like
> the only choice because the data types were REG_MULTI_SZ, but I am
> interested in other reasons to use one over the other.  Obviously,
security
> templates are typically used when the setting is a true security setting,
> but again this mechanism can be extended to deal with just about any
> setting.

> Thanks,
> -Sean


 
 
 

1. Use NT 4 Policy Administrative Templates??

In our NT 4.0 domain, I have controlled access to our windows 2000 terminal
servers through a policy created with poledit.  When our domain is upgraded
to mixed mode, I understand that the policy will cease to function, and that
entries in the file will need to either be migrated or recreated in Group
Policy.
I am wondering about importing the .adm files I've used to the group policy
snap-in.  I've tried a couple in our lab and they seem to work properly.
But on-line help states: "Because the role of Administrative Templates has
changed from Windows Nt 4.0 to Windows 2000, it is not recommended to use
Windows NT 4.0-style .adm files on Windows 2000 clients."

Does this mean it's not the best idea to import them?

I'm using .ADM files for Office 2000, Publisher 2000, Word 2000, Outlook
2000, and Project 2000, among others.  Are there separate Windows 2000
versions of these .ADM files?
Thanks,
Tim Smith

generic levitra india
generic levitra india
what happens if a woman takes viagra

2. Anyone tried this?

3. Administrative Templates not applying in new OU/policy

4. Now THIS MS tech bulletin cracks me up...

5. word 2000 - online template gallery cannot preview or open template

6. installing perl in indigo2

7. Security templates vs. power users...

8. **NEW VERSION** MindBender v1.2 7049

9. When new registry keys are created what is used as the template for security

10. Using Notepad To Add Registry Key/Value Pairs To Security Template .inf Files

11. Security Templates, Group Policies, and OUs

12. Can Security Templates Be Applied To Group Policies

13. How to Apply Security Template to OU Group Policy