Copyright: Monday, July 09, 2001 08:16:43


Security templates and Group Policy


Displays the users, computers, or groups who have this logon right or privilege.

For more information on this security setting, see User Rights Assignment in Help.


Click to add another user, computer, or group.

For more information on this security setting, see User Rights Assignment in Help.


Removes the highlighted user, computer, or group.

For more information on this security setting, see User Rights Assignment in Help.


Displays the members of this group, as specified by the Restricted Group policy.

For more information on this security setting, see Restricted Groups in Help.


Adds a user or group as a member of this group, as specified by the Restricted Group policy.

For more information on this security setting, see Restricted Groups in Help.


Removes the highlighted user or group from membership of this group.

For more information on this security setting, see Restricted Groups in Help.


Displays the list of groups of which this group is a member and ensures that each restricted group is a member of only those groups specified in the Member Of column.

For more information on this security setting, see Restricted Groups in Help.


Adds this group as a member of another group.

For more information on this security setting, see Restricted Groups in Help.


Removes the highlighted group.

For more information on this security setting, see Restricted Groups in Help.


Specifies whether to audit this event when it is successful.

For more information on this security setting, see Audit Policy in Help.


Specifies whether to audit this event when it is not successful.

For more information on this security setting, see Audit Policy in Help


Provides a space for you to type a numeric value for this setting. You can also click the arrows to select a new setting.

For more information on this security setting, see Security setting descriptions in Help.


Specifies whether you can configure this security setting.

For more information on this security setting, see Security setting descriptions in Help.


Specifies that this attribute is available.

For more information on this security setting, see Security setting descriptions in Help.


Specifies that this attribute is unavailable.

For more information on this security setting, see Security setting descriptions in Help


Provides a space for you to add text that is displayed to users.

For more information on this security setting, see Security setting descriptions in Help.


Specifies whether to overwrite the system log events after a specified number of days.

For more information on this security setting, see Event Log in Help.


Specifies whether to overwrite the system log events only when there is no further available disk space to append new entries.

For more information on this security setting, see Event Log in Help.


Select to always append entries without overwriting the system log events. You will have to manually clean out the log when it grows too large for available disk space.

For more information on this security setting, see Event Log in Help.


Specifies that this service should start automatically at system start time.


Specifies that you do not want this service to start until you manually start the service.


Specifies that this service is unavailable.


Click to edit the permissions for a user, computer, or group that specify which operations are allowed, denied, or audited.


Specifies that the permission entries on child objects be reset so that they are identical to the current parent object’s permission entries. Once this is applied, it will overwrite all permission entries on child objects.


Displays the name of the security template. A unique name will help you to quickly identify the types of systems the template was created for.


Displays the description of the security template. This can be used to uniquely define why and for what types of systems this template was created.


Lists the available options for this security setting.

For more information on this security setting, see Security Options in Help.


Security configuration and analysis


Provides a space for you to enter values that will be stored in the analysis database. You can also click the arrows to select a new setting.

For more information on this security setting, see Security setting descriptions in Help.


Displays your computer’s current security settings.


Provides a space for you to type a numeric value that will be stored in the analysis database.

For more information on this security setting, see Security setting descriptions in Help.


Specifies whether to make a change to the analysis database. This change will not affect your computer’s security settings.


Select to make this attribute available. The change is reflected in your analysis database. For more information on this security setting, see Security setting descriptions in Help.


Select to make this attribute unavailable. The change is reflected in your analysis database. For more information on this security setting, see Security setting descriptions in Help.


Specifies whether to audit this event when it is successful. This change is only reflected in the analysis database and does not affect your computer’s security settings.

For more information on this security setting, see Audit Policy in Help.


Specifies to audit this event when it is not successful. This change is only reflected in the analysis database and does not affect your computer’s security settings.

For more information on this security setting, see Audit Policy in Help.


Click to keep the current security settings on the system.


Click to change the current system security settings to the stored template settings in your analysis database.


Click to view the current system security settings before confirming this selection.


Click to view or modify the stored template security settings before confirming this selection.


Click to immediately apply your selection to the system.


Displays the list of registry keys.


Displays the registry key you have selected from the list.


Select the security template you want to save.


Displays the current security setting value for the system that is used during analysis.


Displays the settings for the system log that determine how often the log is overwritten. The setting is reflected in the stored template in your analysis database.


Specifies the number of days before the log events are overwritten. The setting is reflected in your analysis database.

For more information on this security setting, see Event Log in Help.


Specifies to overwrite the log events only when there is no available disk space to append new entries. The setting is reflected in your analysis database.

For more information on this security setting, see Event Log in Help.


Specifies to always append entries without overwriting the system log events. You must clean out the log manually when it grows too large for available disk space. The setting is reflected in your analysis database.

For more information on this security setting, see Event Log in Help.


Displays the settings for the system log that determine how often the log is overwritten. The setting will be reflected in your analysis database.


Displays the list of users or groups. If a check box is selected, the user has this right on this computer, the analysis database, or both.

For more information on this security setting, see User Rights Assignment in Help.


Click to add users or groups who should have this right. This change is only reflected in the analysis database and does not affect your computer’s security settings.

For more information on this security setting, see User Rights Assignment in Help.


Displays the current security setting value for the system. This is used during analysis.


Click to view the current security settings for this service.


Select a startup mode for this service. The setting is reflected in your analysis database.


Specifies that this service should start automatically at system start time. The setting is reflected in your analysis database.


Specifies that you do not want this service to start until you manually start the service. The setting is reflected in your analysis database.


Specifies that this service is unavailable. The setting is reflected in your analysis database.


Click to change the security settings for this service. The setting is reflected in your analysis database.


Selects a startup mode for this service. The setting is reflected in this security template or in your analysis database.


Specifies whether to apply the access control entries from this object to all child objects. Any explicit permissions that are already defined on any child object remain in effect.


Displays the attribute on which security analysis has been performed.


Click to view the current security settings that are used during analysis.


Click to prevent this object’s access control entries from being modified in any way.


Click to change security for this object. The setting is reflected in your analysis database.


Displays the progression of the security analysis.


Indicates that Account Policies security settings are being analyzed. If a check mark is displayed, the analysis on this security area is complete.


Indicates that Local Policies security settings are being analyzed. If a check mark is displayed, analysis on this security area is complete.


Indicates that Restricted Groups are being analyzed. If a check mark is displayed, analysis on this security area is complete.


Indicates that registry keys are being analyzed. If a check mark is displayed, analysis on this security area is complete.


Indicates that the file system is being analyzed. If a check mark is displayed, analysis on this security area is complete.


Indicates that system services are being analyzed. If a check mark is displayed, analysis on this security area is complete.


Displays the progression of the security analysis.


Provides a space to type a value.


Click to find the object you want to add.


Displays the list of current accounts (Members of this group), the proposed or recommended setting (Database Setting), and the current setting (Computer Setting).

For more information on this security setting, see Restricted Groups in Help.


Displays the list of current accounts in Members of this group, the proposed or recommended setting in Database Setting, and the current setting in Computer Setting.

For more information on this security setting, see Restricted Groups in Help.


Click to add an account to the list of current accounts. The change is reflected in your analysis database.


Displays the path to the error log that is generated during analysis.


Click to select the path to the location of the error log that is generated during analysis.


Displays the path to the location of the error log that is generated during configuration.


Click to select the path to the location of the error log that is generated during configuration.


Specifies that any stored templates in the analysis database with the imported template should be overwritten. When this check box is cleared, the imported template is merged with the stored templates, forming a composite template in the analysis database.


Displays the description of the security template. This can be used to uniquely define why and for what types of systems this template was created.


Displays the version of the Security Configuration and Analysis snap-in.


Displays the path to where the error log for this process should be saved.


Specifies that any stored templates in the analysis database with the imported template should be overwritten. When this check box is cleared, the imported template is merged with the stored templates, forming a composite template in the analysis database.


Displays the security setting value that is currently enforced on the system.


Click to enable auditing when this event is successful. This change is reflected in the local policy as long as there is no conflict with domain-level settings. If there is, a domain-level setting takes precedence over local settings.

For more information on this security setting, see Audit Policy in Help.


Click to enable auditing when this event is not successful. This change is reflected in the local policy as long as there is no conflict with domain-level settings, when a domain-level policy setting is defined it overrides the local policy setting.

For more information on this security setting, see Audit Policy in Help.


Specifies whether to include this security setting in your local policy security configuration. This change is reflected in the local policy as long as there is no conflict with domain-level settings. When a domain-level policy setting is defined, it overrides the policy local setting.

For more information on this security setting, see Audit Policy in Help.


Displays the security setting value that is currently enforced on the system.


Specifies that this security setting is available. This change is reflected in the local policy as long as there is no conflict with domain-level settings. When a domain-level policy setting is defined, it overrides the local policy setting.

For more information on this security setting, see Security setting descriptions in Help.


Specifies that this security setting is not available. This change is reflected in the local policy as long as there is no conflict with domain-level settings. If there is, a domain-level setting takes precedence over local settings.

For more information on this security setting, see Security setting descriptions in Help.


Provides a space for you to type a new security setting. You can also click the arrows to select a new setting. The setting is reflected in the local policy as long as there is no conflict with domain-level settings. If there is, a domain-level setting takes precedence over local settings.

For more information on this security setting, see Security setting descriptions in Help.


Provides a space for you to type a new security value for this attribute. You can also click the arrows to select a new setting. This change is reflected in the local policy as long as there is no conflict with domain-level settings. If there is, a domain-level setting takes precedence over local settings.


Click to overwrite the log events after a specified number of days. This change is reflected in the local policy as long as there is no conflict with domain-level settings. If there is, a domain-level setting takes precedence over local settings.


Click to overwrite the log events only when there is no available disk space to add new entries. This change is reflected in the local policy as long as there is no conflict with domain-level settings. If there is, a domain-level setting takes precedence over local settings.


Click to always append entries without overwriting the system log events. You must manually remove unnecessary entries from the log when it grows too large for the available disk space. This change is reflected in the local policy as long as there is no conflict with domain-level settings. If there is, a domain-level setting takes precedence over local settings.


Configures a new value for this security attribute. This change is reflected in the local policy as long as there is no conflict with domain-level settings. If there is, a domain-level setting takes precedence over local settings.

For more information on this security setting, see Security setting descriptions in Help.


Displays the list of security attributes.

For more information on this security setting, see Security setting descriptions in Help.


Click to add to the list of security principals.

For more information on this security setting, see Security setting descriptions in Help.


Displays the security setting that is currently enforced on the system.


Displays the new security setting value. This change is reflected in the local policy as long as there is no conflict with domain-level settings. If there is, a domain-level setting takes precedence over local settings.

For more information on this security setting, see Security setting descriptions in Help.


Lists the available options for this security setting. This selection will only be reflected in the analysis database and will not affect your computer’s security settings. In order to select this option, you must select the Define this policy in the database check box.

For more information on this security setting, see Security Options in Help.


You configured security attributes that were dependent on other security settings. Review the list of suggested values and reconfigure the attributes.


Displays the current security setting value for the system that is used during analysis.


Displays the list of registry keys.


Configures a new security value for this attribute.

For more information on this security setting, see Security setting descriptions in Help.


Click the security template you want to save.


Displays the list of security attributes in Assigned to, their current value in Analyzed Setting, and the value stored in the template in your analysis database in Configuration Setting.


Specifies the proposed template setting for this security attribute.


Configures a path to the desired location of the error log for this process.


Displays the description of the security template. This can be used to describe why and for what types of systems this template was created.


Displays the name of the security template. A unique name will help quickly identify the types of systems the template was created for.


Displays the description of the security template. This can be used to describe why and for what types of systems this template was created.


Displays the security setting value currently enforced on the system.


Displays the list of security attributes.


Displays the registry key you have selected from the list.


Configures a new security value for this attribute. This change is reflected in the local policy as long as there is no conflict with domain-level settings. If there is, a domain-level setting takes precedence over local settings.

For more information on this security setting, see Security setting descriptions in Help.