Security Templates

Within each local computer policy and within a GPO Computer Configuration node, there is a section named Security Settings, as shown in Figure 19.3. This section includes settings for computer audit policies, account management settings, and user rights assignments. This section of the policy is unique because it can be imported and exported individually. In previous versions of Windows, several security templates were provided out of the box to give administrators the ability to quickly load a set of best-practice security configuration settings. These templates included basic workstation and server templates along with high security, compatible security, and domain controller security templates.

Figure 19.3. Examining the computer security section.

[View full size image]