8.9. Final Thoughts
To know security, you need to know Group Policy. To that end, we've toured some of the major sights along the Group Policy security highway. From the "Default Domain Controllers Policy" and "Default Domain Policy" GPOs to Software Restriction Policies to Security Templates—a lot can be accomplished in there.
Walking up to a specific machine and applying local security sounds like a great, straightforward idea—until you have so many machines you couldn't possibly walk up to them all. This chapter covered some alternate methods for asserting your will across the network.
Use security templates for all types of machines. But if you're configuring Windows 2003/SP1 or newer machines, the new SCW is your new best friend.
Remember ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access