Is it possible to edit the security templates prior to OS install to make a few minor adjustments, specifically the “setup security.inf” template and include them in the build?

See C:\WINNT\security\templates and for win 2000 workstation, open basicwk.inf

See also sceregvl.inf

I make edits to basicwk.inf in some settings because it makes me nuts that users cannot change the time. that means any time synch program they run also lacks that right, which is really stupid. MS just wants us all to run the time service, but I don't want to run their software for this. Anyway, I (obviously) use the hacked setup DLLs, so I am not sure if you can edit this file and recompress it and have it work without Windows complaining. I suspect that you can.

From a network admin perspective, it is good that users cannot change the time. It is tough to schedule maintenance, defragging, patching, etc when joe blow changes his time to something crazy or dorks up the DST option.

Reading the HFSLIP guides, where would you put the modified basicwks.inf? In the FIX folder or the HFSVPK folder?

Fix.