Security Policy Templates?

[Ben Blackmore]

Hi,

Is it possible to download different .adm files from Microsoft's site, for
security policy templates? I'd like to import one that is something along
the lines of 'Lightly Managed Desktop' as described in Microsoft's
'IntelliMirror Scenarios'.

Cheers

Ben

 

[Chriss3]

Hi Ben, An administrative template (.adm) file. An .adm file defines the
property page the Group Policy Object Editor will display to allow the
administrator to manage its settings. The file also indicates the registry
location where the settings are stored. This means this are the default
settings you can define, but you define them as you need them apply. There
is no reason to cut down them and remove settings from the default
templates. You have how ever write own Administrative Templates.

 

[Chriss3]

Please ignore the line "You have how ever write own Administrative
Templates." I mean you can how ever write own administrative templates for
customize settings to fit your needs.

 

[Jimmy Andersson [MVP]]

Take a look at http://thethin.net/tsdownload.cfm for more policy templates.

Two good articles about .adm files:

Advanced topic: Creating custom .adm files:
http://www.microsoft.com/windows200...00/en/professional/help/sag_SPconcepts_34.htm

To add or remove an Administrative Template (.adm file):
http://www.microsoft.com/windows200...0/en/professional/help/gptext_addtemplate.htm

(URLs may be wrapped)

Regards,
/Jimmy

 

[Ben Blackmore]

Hi Ben, An administrative template (.adm) file. An .adm file defines the
property page the Group Policy Object Editor will display to allow the
administrator to manage its settings. The file also indicates the registry
location where the settings are stored. This means this are the default
settings you can define, but you define them as you need them apply. There
is no reason to cut down them and remove settings from the default
templates. You have how ever write own Administrative Templates.

Oh, I see what you mean about .adm files, I didn't realise they were the
property pages, I thought they were files you could import that would change
all the settings, in the property pages, to that of the template.

Currently most of the settings in our OU are 'Not Configured', we now want
to start testing and deploying settings to lock down the workstations, but
there are so many different settings, I was hoping there would be a file I
could import that would set all the settings to recommended microsoft domain
security!

Ben

 

[Ben Blackmore]

Ah, I just figured out what I was trying to do, was confusing myself!
I remember once applying a security template (.inf).
Group Policy Object Policy > Computer Configuration > Windows Settings >
Security Settings > Import Policy
Then importing a standard workstation security policy, I was confusing
myself by thinking you could do it with the whole group policy!

Ben