How to use the Security Configuration and Analysis tool

Windows 2000 includes a tool called "Security Configuration and Analysis" that can help you check your security settings. Unfortunately, this tool is well hidden in a default installation of Windows 2000. This document shows you how to use this tool.


1.) Click on the "Start" menu, and choose "Run".

Run MMC


2.) Type "mmc" into the run dialog, and press Return.

3.) The "Microsoft Management Console" (mmc) appears. Click on the "Console" menu, and choose "Add/Remove Snap-in..."

Add/Remove


4.) Scroll down and click on the "Security Configuration and Analysis" snap-in, and click on the "Add" button.

Security Configuration and Analysis snap-in


5.) Click on the "Close" button, and then click on the "OK" button.

6.) Right click on the "Security and Configuration Analysis" node, and choose "Open Database..."

Open Database


7.) Type in any name for the security database. The security database is just temporary storage for this program. In the figure below, the user has entered the name "securityTest" for the database. Click on the "Open" button.

Open Database


8.) Choose a template to import. Note that you can also make your own template using the "Security Templates" MMC Snap-in. The template is a database of recommended security settings. The following are some of the pre-defined templates that are available.
  • basicdc.inf Basic Security Settings for an Active Directory Domain Controller
  • basicsv.inf Basic Security Settings for a Windows 2000 Server (non-DC)
  • basicwk.inf Basic Security Settings for a Windows 2000 Professional Machine
  • compatws.inf LOW Security Settings for a Windows 2000 Professional machine in a mixed (NT compatible) Domain
  • hisecdc.inf High Security Settings for an Active Directory Domain Controller Server
  • hisecwk High Security for a Windows 2000 Server


Choose the Security Template that is appropriate for your situation (basicsv.inf is a good place to start). Click on the "Open" button.

Open Template

1
9.) Right click on the "Security Analysis and Configuration" node in the left pane, and choose "Analyze Computer Now".
Analyze Now


10.) The tool then compares your computer's settings to those that are recommended by the template.

11.) When the analysis is complete, navigate through all the items in the left pane. A read "X" will appear in the right pane for any settings the template recommends you change.

Analysis



Problems, Comments, Suggestions? Click here to contact Greg Thatcher

Please read my Disclaimer





Copyright (c) 2013 Thatcher Development Software, LLC. All rights reserved. No claim to original U.S. Gov't works.