MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

!
Lesson 1 Overview of Security Policy
16-7
Compatible (Compatws.inf) This template provides a higher level of security than
Setup Security, but still ensures that standard applications will run successfully. By
default, this template allows all users to run Windows-certified applications, but
allows only power users to run noncertified applications.
Secure (Securews.inf) This template adds an additional layer of security to the
Compatible level and can restrict some applications from functioning properly.
High Secure (Hisecws.inf) This template provides a maximum level of security for
network traffic and communication protocols without regard for application compatibility.
The High Secure templates impose greater restrictions on the levels of
encryption and signing required for authentication.
Root Directory Permissions (Rootsec.inf) This template specifies the default Windows
XP Professional permissions for the root of the system partition. You can use
this template to reset the file permissions for the system partition root in disaster
recovery situations.
Exam Tip The Setup Security template (Setup Security.inf) defines the default level of
security applied to all new installations of Windows XP Professional on an NTFS partition. This
template is useful resetting security levels back to their defaults.
How to Customize a Predefined Security Template To customize a predefined security
template, use these steps:
1. Click Start, and then click Run.
2. In the Run dialog box, type mmc, and then click OK.
Windows opens the Microsoft Management Console (MMC) with a blank console
window named Console1.
3. In the console, click File, and then click Add/Remove Snap-In.
4. In the Add/Remove Snap-In dialog box, click Add.
5. In the Add Standalone Snap-Ins dialog box, click Security Templates, and then
click Add.
6. Click Close, and then click OK.
In the console window, Windows displays the Security Templates add-in, as
shown in Figure 16-4.