Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: ADMX Templates vs Registry files

14 Jun 2012   #1
w1r3d

Windows 7 Professional
 
 
ADMX Templates vs Registry files

Hi all,

I'm working on hardening a Windows 7 host. I was given a spreadsheet with all the settings that it needs to be hardened with, so I went ahead and applied those. However, it sounds like in the future we will have more Win7 hosts that will also need to be hardened, so I'd like to try and automate/streamline this process somehow.

What I've done so far (and now I'm not sure I'm doing the right thing) is create a Security Template (.inf file) using MMC. For the rest of the settings, I've downloaded the ADMX templates from the Microsoft website, and I've been "configuring" those with the settings that are outlined in the spreadsheet given to me.

That said, I haven't actually tested the templates. I'm currently working on converting an old .adm file to .admx. Then it hit me: is this even the best way to go about this? Should I just create a big .reg file containing all these keys, and then run them on the target boxes?

What do y'all think? What has been your experience with Windows 7 hardening? Am I going down the right path?


Thanks in advance!
Pedro


My System SpecsSystem Spec
.

14 Jun 2012   #2
Dwarf

Windows 8.1 Pro RTM x64
 
 

Hi Pedro and welcome to W7 Forums

It all depends. Many of the settings will have an equivalent in the Registry, but not all. In addition, some Registry settings will need to be applied from an administrative account whereas others will need applying separately for each user. Without knowing the settings you're working with, we cannot say for sure what your best cause of action will be.
My System SpecsSystem Spec
14 Jun 2012   #3
w1r3d

Windows 7 Professional
 
 

I see. Well, it is comforting to know that there's a chance I didn't waste ~4 hours today setting up templates. I'll test out the templates I've been working on and see if they work, and depending on how that goes I may just try to "automate" as much as I can using registry values (since, to my current knowledge, are easier to apply than a template).

That makes sense that some values may need to be set for individual users. I believe all of what I'm dealing with are admin-side policies/settings, so I think I'm off the hook on that.


Y'know, it's taken me a lot of time to try and "automate" all this. I hope that whenever I'm done, the amount of time it took me to work on this is still less than the amount of time that it would take to configure the computers manually! :/

Thanks for your reply, and for welcoming me to the forums
Pedro
My System SpecsSystem Spec
.


Reply

 ADMX Templates vs Registry files




Thread Tools





Similar help and support threads
Thread Forum
Text (.txt) files behaving like registry files
When I double click a file with the .txt extension it asks if it wants to be added to the registry: http://i.imgur.com/1oNr5r2.png
General Discussion
fix registry files
hi when i click on my registry files (.reg) and select merge , reg files was open with note pad how can i fix this problem? please help me
General Discussion
What if I copy someone else's registry files?
My Win7 home premium 64bit registry is corrupt. I've tried repairing it using System Recovery Options and Startup Repair 3 times but they didn't work. I've tried to copy the files from windows32/system/config/regback to windows32/system/config still no luck (the back-up files seem to be more...
Backup and Restore
.reg files open Notepad - do not change registry to read older files
Running Win7Pro 64-bit. Am unable to open older Office 97 files with Office2003 which is installed and running fine. I found a couple of files here and elsewhere with .reg extensions that were supposed to make the necessary registry changes. eg. "UnlockWord.reg" and a more elaborate-looking...
Microsoft Office
Driver Sweeper can't delete all registry files in registry editor
http://i2.aijaa.com/b/00227/9175142.png So this is the situation: I've unistalled Amd Driver from Device Manager, Unistalled Catalyst software and ran Driver Sweeper. There is only 3 registeries that the Driver Sweeper CAN'T delete and these are under SYSTEM\ folder. I've tried to change user...
Drivers
Registry Files
Hello guys, I have been using Windows 7 for a long time now. I have screwed up with its default settings such as fonts and other stuff. Is there any registry files that I can download and reinstall them to their default settings rather than reinstalling Windows 7 from the beginning.
BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 02:46.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App