Discussion on:

Cooking Up Results: Create your own Windows XP Security template

Is there a way to apply the security settings via a login script or other method to easily allow the settings to be replicated accross many machines?

If this could be rolled out over a network, it would turn my 2 day project into a 5 minute task!
Any ideas would be greatly appreciated...

If you are using Active Directory, then security policies can be used in conjunction with group policy and applied to OUs or domains.

Not my script originally, but here is how it was done. Assuming you don't use some sort of GPO... Edit your template (*.inf), save it in your netlogon directory (or other acessible share). The secedit command is then added to your login.bat file. The piped Y allows the configuration to begin without user intervention. To keep from having the configuration applied everytime, have a check for successful completion. You can also add registry/file mods not included in your template during this configuration. Users should have appropriate rights for this to work...

----------

if exist c:\confsec\config.ok goto confchk

echo Y | secedit /configure /db c:\%systemroot%\security\configured.db /cfg \\server\netlogon\newtemplate.inf /overwrite /verbose

:confchk
if exist c:\\%systemroot%\security\configured.db goto writeconf

echo %computername%\%username% >> \\server\conferrloglocation\secconf.log
if exist c:\confsec\config.ok del c:\confsec\config.ok
goto confdone

:writeconf
if not exist c:\confsec\config.ok echo . > c:\confsec\config.ok

:confdone

What would be the best way to apply a security template to multiple WinXP workstations, all logging into Netware servers? (no AD)