Default Security Templates in Windows 2008

re: Default Security Templates in Windows 2008

davbea — Tue, 21 Jul 2009 21:40:27 GMT

Nope. Formatting is similar but not identical. They both use SDDL but the defaults and the various things you can manipulate are different between the two systems. If you try to apply a 2003 template to a 2008 computer (or vice versa) you'll usually break things in bad ways.

Best thing to do in this scenario is recreate the template specifically for 2008. Tools/methods described here:

http://technet.microsoft.com/en-us/library/cc754373(ws.10).aspx

--David

re: Default Security Templates in Windows 2008

Casper42 — Tue, 21 Jul 2009 20:33:48 GMT

Are the security Templates in 2008 in the same format as the ones in 2003.

The main reason I ask is we have some templates we import into all new servers being built and we're getting ready to roll some of our first 2008 machines and I dont know if I can simply run my existing SECEDIT script using the existing Template, or not.

The items we are configuring are in the following section headings:

[System Access]

[System Log]

[Security Log]

[Application Log]

[Event Audit]

Thanks,

Dan

Default Security Templates in Windows 2008 | Windows 2008 Security

Default Security Templates in Windows 2008 | Windows 2008 Security — Thu, 29 May 2008 03:21:00 GMT

PingBack from http://windows2008security.com/network-security/default-security-templates-in-windows-2008/