Windows Server 2003 Recommended Baseline Security

Windows Server 2003
Recommended Baseline Security (ITSG-20)
4 Server Policy Files
4.1 Policy File Application
Apply policies dictated by the environment (Domain or Workgroup).
4.1.1 Policy Application in a Domain
The policy files are applied to Organizational Units within the Active Directory. The structure of
the Directory will dictate the exact names and locations of the Organizational Units. The
structure deployed in the CSE lab had an Organizational Unit for “Public Servers” to which the
Baseline configuration was applied. The “Print Servers” and “File Servers” organizational units
are placed in the “Public Server” organizational unit. The appropriate policies are applied to the
specific organizational unit.
This procedure is applicable to any organizational unit and any policy file. Simply substitute the
‘OU’ and ‘policy file name’ as required.
1. Invoke Active Directory interface.
2. Expand Directory - click on the “+” signs to display the desired OU.
3. Right click on the desired OU and select Properties from the menu.
a. “Organizational Unit Properties” dialog opens.
4. Select “Group Policy” tab.
5. Click “New” button.
6. “New Group Policy Object” is created.
7. Rename “New Group Policy Object” to desired value.
8. Click “Edit” button.
b. “Group Policy Object Editor” dialog opens.
9. Click “+” beside “Windows Settings”.
10. Right Click “Security Settings”.
11. Select “Import Policy” from menu.
12. Browse to desired policy file and select it.
13. Enable “Clear this database before importing”.
14. Click “Open” (policy is imported).
15. Click “File” and then “Exit”.
16. Click “Apply”.
17. Click “Exit”.
Server Policy Files March 2004 43