How to remove an applied security template on XP SP2

[Doug Fox]

Let say, a XP SP2 standalone workstation have "securews.inf" applied. Now,
the security folks wanted to have "hisecws.inf" applied instead.

Do I need to "uninstall" securews.inf before installing hisecws.inf?

If it is required, what would be the steps? Kindly point out the sources
for these steps.

If it is not required, will the "newl" security template replace all
settings of securews.inf?

Thanks!

[Steven L Umbach]

You can't uninstall a security template unless you had created a rollback
security template which can be easily done in Windows 2003 with the secedit
command but that is not available in XP Pro though you can manually make one
but in any case such a template needs to be done before a security template
is applied. Anyhow in your case the security templates you mention are
incremental so you just apply securews.inf to the XP Pro computer and it
will change only the settings that are defined in the securews.inf. You can
use the mmc snapin for Security Configuration and Analysis if you want to
see what changes will be implemented in the analyze mode. The XP Pro
Security Guide may be of help and if you search Microsoft.com they have a
lot of info on security templates.

Steve

http://www.microsoft.com/technet/security/prodtech/windowsxp/secwinxp/default.mspx
--- XP Security Guide
http://www.microsoft.com/technet/prodtechnol/windows2000serv/howto/seconfig.mspx
--- SCA tool and applies to XP

"Doug Fox" > wrote in message
...
> Let say, a XP SP2 standalone workstation have "securews.inf" applied.
> Now, the security folks wanted to have "hisecws.inf" applied instead.
>
> Do I need to "uninstall" securews.inf before installing hisecws.inf?
>
> If it is required, what would be the steps? Kindly point out the sources
> for these steps.
>
> If it is not required, will the "newl" security template replace all
> settings of securews.inf?
>
> Thanks!
>
>

[QuidnuncSimcha]

Hello,

Can per also import the high security work station template with the same
snap-in?

right-click the security configuration, open database, create a log file,
close database, right-click security config, import the high security for
work station, and then you can run an analysis.

"Steven L Umbach" wrote:

> You can't uninstall a security template unless you had created a rollback
> security template which can be easily done in Windows 2003 with the secedit
> command but that is not available in XP Pro though you can manually make one
> but in any case such a template needs to be done before a security template
> is applied. Anyhow in your case the security templates you mention are
> incremental so you just apply securews.inf to the XP Pro computer and it
> will change only the settings that are defined in the securews.inf. You can
> use the mmc snapin for Security Configuration and Analysis if you want to
> see what changes will be implemented in the analyze mode. The XP Pro
> Security Guide may be of help and if you search Microsoft.com they have a
> lot of info on security templates.
>
> Steve
>
> http://www.microsoft.com/technet/security/prodtech/windowsxp/secwinxp/default.mspx
> --- XP Security Guide
> http://www.microsoft.com/technet/prodtechnol/windows2000serv/howto/seconfig.mspx
> --- SCA tool and applies to XP
>
> "Doug Fox" > wrote in message
> ...
> > Let say, a XP SP2 standalone workstation have "securews.inf" applied.
> > Now, the security folks wanted to have "hisecws.inf" applied instead.
> >
> > Do I need to "uninstall" securews.inf before installing hisecws.inf?
> >
> > If it is required, what would be the steps? Kindly point out the sources
> > for these steps.
> >
> > If it is not required, will the "newl" security template replace all
> > settings of securews.inf?
> >
> > Thanks!
> >
> >
>
>
>

[Steven L Umbach]

Yes you can do that by selecting configure instead of analyze which usually
done after you use analyze to compare the settings and that they are what
you expect.

Steve


"QuidnuncSimcha" > wrote in message
...
> Hello,
>
> Can per also import the high security work station template with the same
> snap-in?
>
> right-click the security configuration, open database, create a log file,
> close database, right-click security config, import the high security for
> work station, and then you can run an analysis.
>
> "Steven L Umbach" wrote:
>
>> You can't uninstall a security template unless you had created a rollback
>> security template which can be easily done in Windows 2003 with the
>> secedit
>> command but that is not available in XP Pro though you can manually make
>> one
>> but in any case such a template needs to be done before a security
>> template
>> is applied. Anyhow in your case the security templates you mention are
>> incremental so you just apply securews.inf to the XP Pro computer and it
>> will change only the settings that are defined in the securews.inf. You
>> can
>> use the mmc snapin for Security Configuration and Analysis if you want to
>> see what changes will be implemented in the analyze mode. The XP Pro
>> Security Guide may be of help and if you search Microsoft.com they have a
>> lot of info on security templates.
>>
>> Steve
>>
>> http://www.microsoft.com/technet/security/prodtech/windowsxp/secwinxp/default.mspx
>> --- XP Security Guide
>> http://www.microsoft.com/technet/prodtechnol/windows2000serv/howto/seconfig.mspx
>> --- SCA tool and applies to XP
>>
>> "Doug Fox" > wrote in message
>> ...
>> > Let say, a XP SP2 standalone workstation have "securews.inf" applied.
>> > Now, the security folks wanted to have "hisecws.inf" applied instead.
>> >
>> > Do I need to "uninstall" securews.inf before installing hisecws.inf?
>> >
>> > If it is required, what would be the steps? Kindly point out the
>> > sources
>> > for these steps.
>> >
>> > If it is not required, will the "newl" security template replace all
>> > settings of securews.inf?
>> >
>> > Thanks!
>> >
>> >
>>
>>
>>