Tip
Subject Content

229
Setting registry and file permissions after upgrading to Windows 2000

If you've recently upgraded a Windows NT computer to Windows

2000, you might have noticed that the upgrade didn't

automatically configure the default Windows 2000 permissions on

your computer's file system and registry. This is because

Microsoft designed the Windows 2000 Setup utility to not reset

permissions during an upgrade. If you want to assign the default

permissions to your computer's file system and registry, an easy

way to do so is to use the Security Configuration And Analysis

snap-in within an MMC.



To begin, from the Start menu, choose Run. In the Open text box,

type mmc and click OK. Next, choose Console | Add/Remove Snap-In.

Click Add, and then the Security Configuration And Analysis

snap-in and click Add again. Click Close to close the Add

Standalone Snap-In dialog box. Click OK to close the Add/Remove

Snap-In dialog box. Next, in the console tree, right-click on

Security Configuration And Analysis and choose Open Database. In

the File Name text box, type a name for the database (to which

you're going to import security settings) and click Open. In the

Import Template dialog box, select the Setup Security template

and click Open. Right-click on Security Configuration And

Analysis and choose Analyze Computer Now. Click OK to accept the

default error log file path. The Security Configuration And

Analysis snap-in will now analyze your computer to determine

which security changes you need to make.



When the analysis is complete, you can use the entries in the

details pane to determine which security settings on your

computer don't match the default Windows 2000 security settings.

The Security Configuration And Analysis snap-in displays a red X

over any security setting that differs from the default values.

You can change your computer's security settings to match all the

settings in the Setup Security template by right-clicking on the

Security Configuration And Analysis object in the console tree

and choosing Configure Computer Now.

Page 230 of 237
First Previous Next Last