Hello, In 'Step-by-step Guide to Kerberos 5 Interoperability' document, it is stated as follows: "To deploy realm configuration data to multiple computers, use the security configuration template mechanism instead of using Ksetup explicitly on individual computers"
Is there any good document / howto about how to use security configuration template to achieve the same results as ksetup ? I've been reading some of microsoft knowledge articles such as: How to add custom registry settings to security configuration editor, how to create custom administrative templates in windows 2000, etc..but I haven't got a clear picture of how it can be done using security configuration template. This is the part that I don't understand: "Once the Sceregvl.inf file has been modified and registered, your custom registry values are exposed in the SCM UI's on that machine. You can then create security templates or policies that define your new registry values. These templates or policies can then be applied to any machine regardless of whether Sceregvl.inf has been modified on the target machine or not." (taken from Microsoft's article: How to add custom registry settings to security configuration editor). Is SCM the same as security configuration tool and analysis ? Well...from reading the article, my guess is that I will need to update sceregvl.inf, register the changes by doing 'regsvr32 scecli.dll', and also change the group policy. Anyway, I've tried to update sceregvl.inf but it didn't work :-( The changes didn't seem to be reflected in the registry editor as what usually happen using ksetup. -lara- ===== ------------------------------------------------------------------------------------ La vie, voyez-vous, ca n'est jamais si bon ni si mauvais qu'on croit - Guy de Maupassant - ------------------------------------------------------------------------------------ __________________________________ Do you Yahoo!? Yahoo! Tax Center - File online by April 15th http://taxes.yahoo.com/filing.html List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/