I want to create a security template and deploy it to Windows 2000 Pro workstations over SMS. Our domain is Win NT 4.0, so active directory is not in use. From what I’ve read so far, I create an SDB file using the Security Configuration and Analysis snap-in for the MMC, install the SDB file to the workstation, create an INF security template with the Security Templates snap-in, then run
SECEDIT.EXE /configure /cfg c:\winnt\security\templates\template.inf /db c:\winnt\security\templates\template.sdb
This seems to work, except for the group policy of ‘Unsigned Driver Installation Behavior’. It is set to Warn But Allow Installation on the systems, but I want to change it to Silently Succeed. Can anyone see what I might be doing wrong in the above command line, or know of any tips for using Secedit? Thanks!
Arlo