![]() ![]() This fact compromisessecurity in Workgroup environments, and removable media security canalso be compromised in networks with multiple identical computer SIDs.Demand from the Windows community has lead several companies to developprograms that can change a computer's SID after a system has beencloned. This technique involves copying the disks of a fully installedand configured Windows computer onto the disk drives of other computers.These other computers effectively appear to have been through the sameinstall process, and are immediately available for use.While this method saves hours of work and hassle over other rolloutapproaches, it has the major problem that every cloned system has anidentical Computer Security Identifier (SID). Please see Mark Russinovich’s blog post: IMPORTANT:Regarding SIDs, Microsoft does not support images that are preparedusing NewSID, we only support images that are prepared using SysPrep.Microsoft has not tested NewSID for all deployment cloning options.For more information on Microsoft's official policy, please see thefollowing Knowledge Base article.IntroductionMany organizations use disk image cloning to perform mass rollouts ofWindows. 11 minutes to read.In this articleBy Mark RussinovichPublished: November 1, 2006Note: NewSID has been retired and is no longer available fordownload.
0 Comments
Leave a Reply. |