Security Configuration Manager Tool Set

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Windows 2000 and Windows Server 2003 provide an extensive set of security technologies and management tools, including the Security Configuration Manager tools, support for IPSec, the Kerberos V5 authentication protocol, public key infrastructure (PKI), Encrypting File System (EFS), and smart cards.

The Security Configuration Manageris a set of tools that includes:

  • Security templates. Use these .inf files to create customized security policies. You can import a predefined security template to a Group Policy object, and then customize it. For more information about security templates, see "Security Templates" in Help and Support Center for Windows Server 2003.

  • Security Configuration and Analysis. Use this tool with a security template to analyze or configure computer security settings for the local computer. For more information about security configuration and analysis, see "Security Configuration and Analysis" in Help and Support Center for Windows Server 2003.

  • Group Policy Object Editor. Use this tool to manage security settings in a Group Policy object for a site, domain, or OU. The Group Policy Object Editor is not part of Security Configuration Manager. However, the Security Settings node, which is found in the Group Policy Object Editor, is part of Security Configuration Manager. For more information about security settings, see "Security Settings extension to Group Policy" in Help and Support Center for Windows Server 2003.

  • Local security policy. Use this tool to manage security settings on the local computer, particularly for clients who are running Windows 2000 or Windows XP Professional on Microsoft® Windows NT® or non-Microsoft networks. For more information about local security policy, see "Local Security Policy" in Help and Support Center for Windows Server 2003.

  • Secedit.exe. Use this command-line tool to automate security configuration tasks. For more information about Secedit, see "Secedit" in Help and Support Center for Windows Server 2003.