Hello, In Windows 7 I would like to build some security templates with default file/folder/registry permission and audit settings. However, I'm not sure what tool to use. Security Templates are what we used to use, but I'm not sure that will work today. For example, if I need to change the permissions on the "Program Files" directory I can't do it with security template (I'm told access denied) - probably because TrustedInstaller is the owner... So... without first taking ownership and performing some other tasks I'm toast. Furthermore, I can't use the Security Templates to audit because TrustedInstaller is owner of many base system file/folders and I can't seem to add TrustedInstaller to a Security Template. Thus, if you try to analyze a file/folder with TrustedInstaller permissions it will always show a discrepency... So... there must be another way right? I haven't spent much time with the Security Compliance Manager, but I doubt that will address my needs - but maybe it does? Thanks! Jeff

Hi, There are some people like you, and you can refer to : http://social.technet.microsoft.com/Forums/en-US/w7itprosecurity/thread/30fd7695-c655-4a3c-b754-8dfa8321eeb8 http://social.technet.microsoft.com/Forums/en/w7itprosecurity/thread/4fd81994-7375-4536-90ba-6eb4388de74b Good luck. Regards, Alex ZhaoPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Thanks Alex for the links. While I appreciate your help, those links do not address my questions above. I had already read those threads. Did MS basically kill the Security Tempate feature in Windows 7? The registry stuff works fine, but the file system stuff doesn't work good from my perspective. I could look at scripting this process but the security templates made it pretty easy.