Active Directory is designed to allow a very large number of users to efficiently access potentially every network resource in the enterprise. Universal access can be great for productivity, but this freedom can pose a significant challenge to maintaining network security. It is absolutely essential that you take a systematic approach to ensuring security on your network. Security issues permeate all aspects of resource management. We cover various security topics throughout the entire book.
Active Directory is very good at displaying a lot of information in an easy-to-use directory structure. This approach is extended to managing your security configuration. You can store security settings in a single file, called a security template .
There is a Security Template Console snap-in available for the MMC, but it’s not installed by default. Installing this console will simplify the process of creating security templates. You can install this snap-in using the following steps:
Open the Microsoft Management Console and choose Console → Add/Remove Snap-In → Add.
You’ll see the Add Standalone Snap-In screen, shown in Figure 13-4. Choose Security Templates, click Add, and then press Close.
Click the OK button ...