Set Security Settings for XP Workgroup PCs without AD

[Guest]

How can I easily set the Local Security Settings for multiple PCs in a
workgroup wihtout AD?

 

[Kerry Brown]

How can I easily set the Local Security Settings for multiple PCs in a
workgroup wihtout AD?

You can't do it easily. You either have to edit the local policy physically
on each machine, use remote desktop to do it for each machine, or remotely
edit the registry for each machine. There may be a way to script it.

http://www.google.com/search?hl=en&q=script+remote+registry+xp&btnG=Google+Search

It can be done, just not easily to the best of my knowledge.

 

[Guest]

Kerry,

Thanks for the reply.

Specifically I am looking to remotely enable audit settings like audit
account logon events etc.

If I could mod the registry that would be great. I looked in the reg. on my
PC but did not see anything relating to audit account events.

There seems like there has to be some way to enable these settings besides
visiting each PC.

 

[Kerry Brown]

Kerry,

Thanks for the reply.

Specifically I am looking to remotely enable audit settings like audit
account logon events etc.

If I could mod the registry that would be great. I looked in the
reg. on my PC but did not see anything relating to audit account
events.

There seems like there has to be some way to enable these settings
besides visiting each PC.

Other than group policy which requires AD I don't know of an easy way. That
is the whole point of using a server with AD, to make management easier

You'll have to sharpen up your search skills. Here's a start.

http://www.google.com/search?hl=en&lr=&q=script+remote+local+policy&btnG=Search

There are some promising links there.

http://www.google.com/search?hl=en&lr=&q=registry+audit+settings&btnG=Search

 

[Steven L Umbach]

For XP Pro create a Security Template that contains the baseline security
settings you want to use. The you can copy that security template to each
computer and either import it into Local Group Policy or apply it with the
secedit command that you could create a small batch file to do it easily
assuming the security template is put in the same location on each computer.
You can use the mmc snapin for Security Templates to manage, create, modify,
and copy Security Templates. To import a Security Template open Local
Security Policy, highlight security settings, right click and select import
policy. The link below explains more.--- Steve

http://www.microsoft.com/technet/security/prodtech/windowsxp/secwinxp/xpsgch05.mspx