How to create security baselines when settings are undefined?

%3CLINGO-SUB%20id%3D%22lingo-sub-1401451%22%20slang%3D%22en-US%22%3EHow%20to%20create%20security%20baselines%20when%20settings%20are%20undefined%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1401451%22%20slang%3D%22en-US%22%3E%3CP%3EI%20need%20to%20create%20a%20Local%20Security%20Settings%20baseline%20and%20apply%20it%20to%20a%20couple%20of%20dozen%20Windows%20servers.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20issue%20I%20found%20is%20that%20blank%20settings%20in%20the%20security%20settings%20are%20not%20exported%20into%20the%20security%20template.%20In%20consequence%20they%20are%20not%20applied%20to%20the%20security%20settings%20when%20the%20template%20is%20imported.%20And%20I%20know%20that%20some%20servers%20do%20have%20certain%20settings%20defined%2C%20that%20I%20need%20to%20reset%20to%20undefined.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20do%20you%20deal%20with%20that%20issue%20when%20creating%20or%20applying%20baselines%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1401451%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Regular Contributor

I need to create a Local Security Settings baseline and apply it to a couple of dozen Windows servers.

 

The issue I found is that blank settings in the security settings are not exported into the security template. In consequence they are not applied to the security settings when the template is imported. And I know that some servers do have certain settings defined, that I need to reset to undefined.

 

How do you deal with that issue when creating or applying baselines?

0 Replies