Hello,
In 'Step-by-step Guide to Kerberos 5 Interoperability'
document, it is stated as follows:
"To deploy realm configuration data to multiple
computers, use the security configuration template
mechanism instead of using Ksetup explicitly on
individual computers"
Is there any good document / howto about how to use
security configuration template to achieve the same
results as ksetup ?
I've been reading some of microsoft knowledge articles
such as: How to add custom registry settings to
security configuration editor, how to create custom
administrative templates in windows 2000, etc..but I
haven't got a clear picture of how it can be done
using security configuration template.
This is the part that I don't understand:
"Once the Sceregvl.inf file has been modified and
registered, your custom registry values are exposed in
the SCM UI's on that machine. You can then create
security templates or policies that define your new
registry values. These templates or policies can then
be applied to any machine regardless of whether
Sceregvl.inf has been modified on the target machine
or not." (taken from Microsoft's article: How to add
custom registry settings to security configuration
editor). Is SCM the same as security configuration
tool and analysis ?
Well...from reading the article, my guess is that I
will need to update sceregvl.inf, register the changes
by doing 'regsvr32 scecli.dll', and also change the
group policy.
Anyway, I've tried to update sceregvl.inf but it
didn't work :-( The changes didn't seem to be
reflected in the registry editor as what usually
happen using ksetup.
-lara-
=====
------------------------------------------------------------------------------------
La vie, voyez-vous, ca n'est jamais si bon ni si mauvais qu'on croit
- Guy de
Maupassant -
------------------------------------------------------------------------------------
__________________________________
Do you Yahoo!?
Yahoo! Tax Center - File online by April 15th
http://taxes.yahoo.com/filing.html
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
