Windows Server 2003 Recommended Baseline Security

Unclassified ITSG for Windows Server 2003
Repeat this process until all OUs (Public Servers, Print Servers and Files Servers) have the
required policy files applied to them.
4.1.2 Policy Application in a Workgroup
The policies for a workgroup server must be applied in the appropriate order to ensure a correct
policy. Apply the Baseline configuration first, than apply additional policies to enable the
designated role of the server.
To enter a policy file with the local Group Policy Editor, perform the following:
1. Open a command window.
2. Enter “MMC” and press “Return”.
a. “Console 1” dialog opens.
3. Click “File”.
4. Select “Add/Remove Snap-in”.
5. “Add/Remove Snap-in” dialog displayed.
6. Click “Add”.
7. “Add Standalone Snap-in” dialog displayed.
8. Browse to and select “Group Policy Editor”.
9. Click “Add”.
10. “Select Group Policy Object” dialog displayed.
11. Accept defaults and click “”Finish”.
12. Click “Close”.
13. Click “OK”.
a. The “Root Console Window” appears.
14. Click on “+” beside “Local Computer Policy”
15. Click on “+” beside “Windows Settings”.
16. Right click on “Security Settings”.
17. Select “Import Policy”.
18. Browse to desired policy file and select it.
a. Import Baseline configuration policy first then Role based policies.
19. Click “Open”.
20. Click “File”.
21. Click “Exit”.
22. “Microsoft Management Console” dialog displayed.
44 March 2004 Server Policy Files