Security templates question

rjbarlow

Hi techies,

still on security of 70-270.
I have made some experience very in depht on security topic in order to get me sure as much as possible when I will seat.
Well, I have come to the conclusion that Security configuration and analysis snap-in and Security templates work just locally, always.

So, for example, one GPO via Active Directory, if exists, overrides some configuration made by means of appliyng Security templates, less than an user log on locally (of course for the two elements: Password policy and Local Policy).

Security templates never are related to be distributed via AD.

Are those things correct?

P.s. I know I conclude many question in this way, but is my way to grasp the concepts, and I'm finding this exam very frustrating.

Thank You.

dynamik

You can import a security template into a GPO: http://technet2.microsoft.com/windowsserver/en/library/7e5267b0-87cf-496a-b36c-6b47a9f9723f1033.mspx?mfr=true

The order these policies are applied is Local > Site > Domain > OU

You don't need worry about security templates in AD/GPO for the test you're doing. That's 291/293 material.

rjbarlow

Oh, very appreciated, so I guessed right, but just for the 70-270. Thank You very much dynamik.