[gptalk] Re: Compatible Security Template applied twice?
- From: "Steve Chambers" <schambers1969@xxxxxxxxx>
- To: gptalk@xxxxxxxxxxxxx
- Date: Sat, 18 Oct 2008 07:11:07 -0700
Is there an easy way to see what File and Registry settings are being
applied by the security policy? Guess if i knew that i could just delete
everything else.
Thanks!
Steve
On Fri, Oct 17, 2008 at 4:15 PM, Steve Chambers <schambers1969@xxxxxxxxx>wrote:
> Tell me about it, this is something that was already in place when I
> started with the company. In fact I have a feeling it has been this way for
> quite some. Nobody seems to know anything about it and I don't know if the
> file and registry security policy is even being utilized. I will make a
> point of verifying that though.
>
> From what research I have done, it looks like it was imported from the
> Compatible (compatws.inf) Security Template?
>
> Steve
>
>
> On Fri, Oct 17, 2008 at 3:54 PM, Darren Mar-Elia <darren@xxxxxxxxxx>wrote:
>
>> 850? Ouch. Even half that number is a lot of keys to be re-permissioning
>> using GP. Keep in mind that security policy re-applies itself every 16 hours
>> by default, not to mention at other times when it may refresh. That means
>> that every key is being re-permissioned each time GP refreshes. Generally
>> speaking I recommend avoiding the use of File and Registry security policy
>> for large numbers of keys or files. What template did you deploy that uses
>> all these permissions?
>>
>> In terms of cleaning it up, you can certainly do it manually from the UI,
>> or you can edit the underlying GPTTmpl.inf file that stores the settings
>> within the SYSVOL part of that GPO.
>>
>> Darren
>>
>> -----Original Message-----
>> From: "Steve Chambers" <schambers1969@xxxxxxxxx>
>> To: gptalk@xxxxxxxxxxxxx
>> Sent: 10/17/2008 3:40 PM
>> Subject: [gptalk] Re: Compatible Security Template applied twice?
>>
>> Thanks Darren,
>>
>> Kind of sounds dumb but what would the recommended method be for cleaning
>> it
>> up? Looks like there is approximately 850 Registry Keys listed so cut that
>> in half.
>>
>> Steve
>>
>>
>> On Fri, Oct 17, 2008 at 3:35 PM, Darren Mar-Elia <darren@xxxxxxxxxx>
>> wrote:
>>
>> > Steve-
>> > It does not sound normal to me and at the very least could cause
>> confusion
>> > down the line and extra work on the client if its not cleaned up.
>> >
>> > Darren
>> >
>> > -----Original Message-----
>> > From: "Steve Chambers" <schambers1969@xxxxxxxxx>
>> > To: gptalk@xxxxxxxxxxxxx
>> > Sent: 10/17/2008 3:32 PM
>> > Subject: [gptalk] Compatible Security Template applied twice?
>> >
>> > Hi!
>> >
>> > Upon reviewing our companies Default Domain Policy i noticed that all
>> > Registry Key entries are duplicated in Group Policy (Hope that makes
>> > sense)***********************
>> > You can unsubscribe from gptalk by sending email to
>> > gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
>> by
>> > logging into the freelists.org Web interface. Archives for the list are
>> > available at //www.freelists.org/archives/gptalk/
>> > ************************
>> >
>>
>> ***********************
>> You can unsubscribe from gptalk by sending email to
>> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
>> by logging into the freelists.org Web interface. Archives for the list
>> are available at //www.freelists.org/archives/gptalk/
>> ************************
>>
>
>
Other related posts:
