Networking / Beginners

Local Security Policy Settings

New to Windows 2000 is the local policy editor GUI. You can find this tool by going to Control Panel | Administrative Tools | Local Security Policy. This tool allows you to set account policies as well as local security policies. We will talk more about account configuration later. For now, let's focus on the local security policies.

The Local Security Policy GUI is actually just a front end for changes to the Registry. Therefore, the use of regedit or regedit32 are no longer required to make common Registry setting changes. Generally, for these security changes, it is better to use the tool than to go into the Registry to make your own changes.

The policy items that are configurable through the Local Security Policy GUI. The following sections go into more detail about recommended changes to the security policy.

NOTE: Windows 2000 provides a number of security configuration templates that can be used to set system configurations, local security policy, and user management settings on the system. If you choose to use one of these templates, make sure you understand the changes that will be made to your system.

[Previous] [Contents] [Next]

In this tutorial:

  1. Windows 2000 Security Issues
  2. Setting up the System
  3. Local Security Policy Settings
  4. Logon Message
  5. LAN Manager Authentication Level
  6. System Configuration
  7. File Systems
  8. Network
  9. Account Settings
  10. USER MANAGEMENT
  11. Setting File Permissions
  12. System Management
  13. Analysis
  14. Configuration
  15. Validation
  16. Export
  17. Auditing a System
  18. Log Files
  19. Looking for Suspicious Signs
  20. Missing Log Files or Gaps in the Log Files
  21. Unknown Processes