I
opened the security template xxxxxx.inf and made a batch file
to undo or remove additions and modifications made by the
template.
Thanks
to everyone for the responses
-----Original Message-----
From: Rick Kingslan [mailto:[EMAIL PROTECTED]
Sent: Friday, March 07, 2003 9:14 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Remove a Local Security TemplateFolks,Don't forget - security templates make more than just changes to registry. You can affect group memberships via the restricted groups, permission on services, permissions on registry, added registry entries, permissions on NTFS, blah, blah, blah.Oh, and if you implemented any of the 10 or so suggested TCP/IP registry settings to further secure TCP/IP, those aren't reversed either.None of this is going to be affected by simply purging a .SDB and log file and refreshing the 'current' settings. As these were additions TO the current, the current doesn't know anything about them. The only way to reverse them is to track your changes with a change control procedure.Rick Kingslan MCSE, MCSA, MCT
Microsoft MVP - Active Directory
Associate Expert
Expert Zone - www.microsoft.com/windowsxp/expertzone
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Friday, March 07, 2003 3:42 PM
To: [EMAIL PROTECTED]What about the registry changes the original template applied? I don't think this would get it.... Thanks though-----Original Message-----
From: John Hicks/MIS/HQ/KEMET/US [mailto:[EMAIL PROTECTED]
Sent: Friday, March 07, 2003 3:26 PM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] Remove a Local Security Template
You can delete the security.sdb file out of \\Winnt\security\database directory. You then run secedit /refreshpolicy {policy type}. We had good luck using this on Win2000 workstations to flush a local policy that had been created on them.
<[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]03/07/2003 01:49 PM
Please respond to
[EMAIL PROTECTED]
To<[EMAIL PROTECTED]> cc Subject[ActiveDir] Remove a Local Security Template
Does anyone know of a way to remove a Local Security Template and return the box to "Gold"? (W2K server)Shawn Hayes, MCSE
Network Engineer
Compass Technology Management
Sound Business Sense for IT
www.compass.net
757.226.3328