security templates in server 2k8

hello,

I need a way to apply some security settings in an automated fashion as part
of the server setup process. The server setup process has to remain fully
automated, no user interaction. Pushing domain based GPO's post setup is not
an option (I won't detail reasons as I don't want to waste your time)

This is really for a base configuration, that can be changed by the actual
admins after servers are delivered, if desired. Its just a starting config,
does not need to be 'enforced'.

so, to do this for server 2k3 I would have used secedit.exe to apply a
security template (which can easily be included in existing scripts)... is
this still a valid option for server 2k8? Are there other, better options
for server 2k8?

any input is appreciated. thanks.

Hello James,

If you can not use GPO's then use secedit as with 2003:
http://technet.microsoft.com/en-us/l.../cc731072.aspx

Additional infos you will find here (expand the "+" in the left pane):
http://technet.microsoft.com/en-us/l.../cc731459.aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> hello,
>
> I need a way to apply some security settings in an automated fashion
> as part of the server setup process. The server setup process has to
> remain fully automated, no user interaction. Pushing domain based
> GPO's post setup is not an option (I won't detail reasons as I don't
> want to waste your time)
>
> This is really for a base configuration, that can be changed by the
> actual admins after servers are delivered, if desired. Its just a
> starting config, does not need to be 'enforced'.
>
> so, to do this for server 2k3 I would have used secedit.exe to apply a
> security template (which can easily be included in existing
> scripts)... is this still a valid option for server 2k8? Are there
> other, better options for server 2k8?
>
> any input is appreciated. thanks.
>

thanks for the info Meinolf. Its appreciated.

"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news: .com...
> Hello James,
>
> If you can not use GPO's then use secedit as with 2003:
> http://technet.microsoft.com/en-us/l.../cc731072.aspx
>
> Additional infos you will find here (expand the "+" in the left pane):
> http://technet.microsoft.com/en-us/l.../cc731459.aspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> hello,
>>
>> I need a way to apply some security settings in an automated fashion
>> as part of the server setup process. The server setup process has to
>> remain fully automated, no user interaction. Pushing domain based
>> GPO's post setup is not an option (I won't detail reasons as I don't
>> want to waste your time)
>>
>> This is really for a base configuration, that can be changed by the
>> actual admins after servers are delivered, if desired. Its just a
>> starting config, does not need to be 'enforced'.
>>
>> so, to do this for server 2k3 I would have used secedit.exe to apply a
>> security template (which can easily be included in existing
>> scripts)... is this still a valid option for server 2k8? Are there
>> other, better options for server 2k8?
>>
>> any input is appreciated. thanks.
>>
>
>