Hello All
I have two W2K3 servers both in different workgroups.
One has been hardened.
I wish to harden the other server using the same settings.
Will the following process work?
Run the security config' and analysis tool on the hardened server.
create a new database and import the setupsecurity template.
Analyze the computer.
Export the settings to an .inf file.

On the second computer
Run the security config and analysis tool
Create a new db and import the .inf file previously created
Configure the computer.

I have tried doing this using a VMware machine as the second server and it
doesn't work correctly.
Am I doing something wrong?
I would be grateful for any advice.
Thanks in advance.
Simone Harris.

Re: export security settings ? by Steven

Steven
Tue May 03 17:02:40 CDT 2005

When you export from SCE you are exporting the database settings and not the
actual computer settings. You can however modify the database settings to be
the same as the computer settings easy enough [unless you have a lot of
registry/file system] and then export to an .inf file. You also may want to
try using secedit to export the security settings [other than registry/file
system] to an .inf file. Once you have the security template that you want
you can apply it to other computers. --- Steve


"Simone Harris" <pleasenospam@here.com> wrote in message
news:um3PuxBUFHA.3944@tk2msftngp13.phx.gbl...
> Hello All
> I have two W2K3 servers both in different workgroups.
> One has been hardened.
> I wish to harden the other server using the same settings.
> Will the following process work?
> Run the security config' and analysis tool on the hardened server.
> create a new database and import the setupsecurity template.
> Analyze the computer.
> Export the settings to an .inf file.
>
> On the second computer
> Run the security config and analysis tool
> Create a new db and import the .inf file previously created
> Configure the computer.
>
> I have tried doing this using a VMware machine as the second server and it
> doesn't work correctly.
> Am I doing something wrong?
> I would be grateful for any advice.
> Thanks in advance.
> Simone Harris.
>



Re: export security settings ? by Simone

Simone
Wed May 04 11:25:10 CDT 2005

I will try to use secedit then and forget about SCE
thanks

"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:uCPTPuCUFHA.2420@TK2MSFTNGP12.phx.gbl...
> When you export from SCE you are exporting the database settings and not
> the actual computer settings. You can however modify the database settings
> to be the same as the computer settings easy enough [unless you have a lot
> of registry/file system] and then export to an .inf file. You also may
> want to try using secedit to export the security settings [other than
> registry/file system] to an .inf file. Once you have the security template
> that you want you can apply it to other computers. --- Steve
>
>
> "Simone Harris" <pleasenospam@here.com> wrote in message
> news:um3PuxBUFHA.3944@tk2msftngp13.phx.gbl...
>> Hello All
>> I have two W2K3 servers both in different workgroups.
>> One has been hardened.
>> I wish to harden the other server using the same settings.
>> Will the following process work?
>> Run the security config' and analysis tool on the hardened server.
>> create a new database and import the setupsecurity template.
>> Analyze the computer.
>> Export the settings to an .inf file.
>>
>> On the second computer
>> Run the security config and analysis tool
>> Create a new db and import the .inf file previously created
>> Configure the computer.
>>
>> I have tried doing this using a VMware machine as the second server and
>> it doesn't work correctly.
>> Am I doing something wrong?
>> I would be grateful for any advice.
>> Thanks in advance.
>> Simone Harris.
>>
>
>