The Microsoft Management Console (MMC) Security Templates snap-in comes with 12 built-in security templates. These built-in templates define five security roles: basic, secure, highly secure, compatible, and optional component file security.
Basic templates. Basic templates implement Microsoft’s recommended policies for a fresh installation (i.e., not an upgrade) of Windows 2000 on a workstation (Basicwk), server (Basicsv), and domain controller (DC—Basicdc). The basic templates don’t modify user rights settings because many applications assign user rights that the software needs to function properly. If a template modifies these rights, the legacy application might no longer run.
You should never modify the basic templates. Their primary purpose is to reset a system to a known state when you’re configuring and testing modified or custom security templates. If you modify the basic templates, you have no easy method for undoing the changes and restoring a system to its newly installed state. (If you do modify a basic template, you can replace the modified .inf file with an unmodified copy from the \security\templates directory on another machine.) . . .
Register
