To add the Security Configuration And Analysis snap-in, follow these steps:
- Select Start > Administrative Tools > Security.
- Select File > Add/Remove Snap-In.
- In the Add/Remove Snap-In dialog box, click the Add button. Highlight the Security Configuration And Analysis snap-in and click the Add button. Then click the Close button.
- In the Add/Remove Snap-In dialog box, click the OK button.
- To specify the security database, follow these steps:
- Right-click Security Configuration And Analysis and select Open Database.
- In the Open Database dialog box, type sampledb in the File Name text box. Then click the Open button.
- In the Import Template dialog box, select the template securews and click the Open button.
- To create the security template, follow these steps:
- In the MMC, select File > Add/Remove Snap-In.
- In the Add/Remove Snap-In dialog box, click the Add button. Highlight the Security Templates snap-in and click the Add button. Then click the Close button.
- In the Add/Remove Snap-In dialog box, click the OK button.
- Expand the Security Templates snap-in and then expand the C:\Windows\Security\Templates folder.
- Double-click the securews file.
- Select Account Policies and then double-click Password Policy.
- Edit the password policies as follows:
- Set the Enforce Password History option to 10 passwords remembered.
- Enable the Passwords Must Meet Complexity Requirements option.
- Set the Maximum Password Age option to 30 days.
- Highlight the securews filename, right-click, and select the Save As option.
- In the Save As dialog box, place the file in the default folder and name the file servertest. Click the Save button.
- To import the security template, follow these steps:
- Highlight the Security Configuration And Analysis snap-in, right-click, and select the Import Template option.
- In the Import Template dialog box, highlight the servertest filename and click the Open button.
- To perform and review the security analysis, follow these steps:
- Highlight the Security Configuration And Analysis snap-in, right-click, and select the Analyze Computer Now option.
- In the Perform Analysis dialog box, accept the default error log file path and click the OK button.
- When you return to the main MMC window, double-click the Security Configuration And Analysis snap-in.
- Double-click Account Policies and then double-click Password Policy. You will see the results of the analysis for each policy, indicated by an x or a check mark next to the policy. Close the window and return to the desktop. Leave the desktop open for the next lab.




