Local security policy settings - secedit

From: ravi (ravicreddy_at_gmail.com)
Date: 11/24/04


Date: 24 Nov 2004 14:45:06 -0800

Hello,

I am trying to export local security settings using secedit on windows
2003.

secedit /export /cfg local.inf /log local.log
secedit /export / mergedpolicy /cfg merged.inf /log merged.log

My understanding is the first call gives local settings even if the
server is connected to domain and domain policy settings are
overriding.

Second command gives the merged polices from domain based GPOs. The
number of settings are differenr in both cases, but the values always
seems to be domain values.

Example: If I have minimum password length set to 8 chars on local and
10 chars on domain, both the above commands gives 10 chars.

I take the server out of domain (make it a stand alone server) then I
get a value of 8 on both cases.

Any one else see this behavior? How do I dump settings from local
secedit.sdb?

Thanks

Ravi



Relevant Pages

  • RE: login and email problems
    ... Please carefully check settings required in my previous post and post the ... Install the RPC ping utility on the client computer and then open a command ... Microsoft CSS Online Newsgroup Support ... Leave the Default Gateway of the internal NIC blank of the server box. ...
    (microsoft.public.windows.server.sbs)
  • Re: Monitoring and Alerts
    ... Relay settings for Exchange SMTP Virtual Server: ... we pursue the performance alerts issue further. ... | Subject: Re: Monitoring and Alerts ...
    (microsoft.public.windows.server.sbs)
  • Re: User-Specific Settings
    ... clear statement from the vendor that running ACT! ... Server is *not* supported. ... it would explain why changes in settings are not preserved. ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.win2000.termserv.apps)
  • Re: All remote access stopped ?
    ... Server 2003 Remote Web Workplace ... Microsoft CSS Online Newsgroup Support ... <Firewall Settings on lefthand side, Advanced settings, Under attack ...
    (microsoft.public.windows.server.sbs)
  • RE: MySQL/PHPMyAdmin on FC3 Connection Problem
    ... // You can disable a server config entry by setting host to ''. ... MySQL server ... MySQL control user settings ... table to describe the display fields ...
    (Fedora)