RE: Windows 2kserver with XP clients - Policies

["Dennis Schut" <Dennis.Schut () infratects nl>]

Hi Ivan,

Just to be sure, you mean that you want to control specific XP settings
via a gPO?

If that's the case, you should think about creating your own
administrative templates (.ADM).

Another thing you can do is to import .ADM templates from a Windows
Server 2003 machine or XP machine.
 
You can find additional information regarding the above on the following
website.
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/xpmanaged
/31_xpapc.mspx

If the desired settings are not in these .ADM's, then you can always
create your own.

This is the way I do it:

On a XP machine install a registry monitor tool which monitors the
changes in the registry.

For example, if you want to have a gPO setting that disables the
firewall.

On the XP machine were you installed the registry monitor tool, first
enable and then disable the firewall, don't forget to first activate the
tool, the tool will register which registry key is used for this action.
If you find the registry key that records this, then you can create an
ADM with the desired settings that you want, disable and/or enable.

Import your ADM file in the XP workstation gPO, link it to the
applicable OU, and test your gPO on a XP machine.

I have attached an .ADM template, so you can see what kind of code you
must use to create one. There is additional information regarding the
ADM code, but I do not know anymore were you can find it, just search
the Microsoft website for ADM, and you will probably find it. 

If you have any questions, feel free to mail me


Best Regards,
 
Dennis Schut 
Technical Consultant 
Infratects BV 
Architects of the Future... 
Maliebaan 68 
3581 CV Utrecht 
The Netherlands
Web: www.infratects.com

-----Original Message-----
From: Ivan Carlos [mailto:icarlos () icarlos net] 
Sent: Tuesday, May 11, 2004 01:21
To: security-basics () securityfocus com; Yahoo - Grupo quebradesistema
Subject: Windows 2kserver with XP clients - Policies

How to create or locate to download policies templates to manage XPs
from 
Win2k Server?

For example, disable themes, and the "theme" services, firewall, etc?

I cannot found anything in microsoft's and technet websites...

tx a lot

Ivan "Doomer" Carlos
-
Cell.: +55 (11) 8112-0666
icarlos () icarlos net
www.icarlos.net
-
ICQ UIN: 666621
Y!M / AIM: ivandoomer
MSN: icarlos () icarlos net
-------------------------------------------------- 


------------------------------------------------------------------------
---
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545
off 
any course! All of our class sizes are guaranteed to be 10 students or
less 
to facilitate one-on-one interaction with one of our expert instructors.

Attend a course taught by an expert instructor with years of
in-the-field 
pen testing experience in our state of the art hacking lab. Master the
skills 
of an Ethical Hacker to better assess the security of your organization.

Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.ht
------------------------------------------------------------------------
---




Infratects B.V.

Attachment: ADMBlat.adm
Description: ADMBlat.adm

---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------