Local security settings - secedit

From: ravi (ravicreddy_at_gmail.com)
Date: 11/24/04

  • Next message: Perry: "Re: Isolation of the Root CA" 
    Date: 24 Nov 2004 14:50:39 -0800

    Hello,

    Local security settings - secedit

    I am trying to export local security settings using secedit on windows
    2003.

    secedit /export /cfg local.inf /log local.log
    secedit /export / mergedpolicy /cfg merged.inf /log merged.log

    My understanding is the first call gives local settings even if the
    server is connected to domain and domain policy settings are
    overriding.

    Second command gives the merged polices from domain based GPOs. The
    number of settings are differenr in both cases, but the values always
    seems to be domain values.

    Example: If I have minimum password length set to 8 chars on local and
    10 chars on domain, both the above commands gives 10 chars.

    I take the server out of domain (make it a stand alone server) then I
    get a value of 8 on both cases.

    Any one else see this behavior? How do I dump settings from local
    secedit.sdb?

    Thanks

    Ravi

  • Next message: Perry: "Re: Isolation of the Root CA"

    Relevant Pages

    • Re: Group Policy Issues
      ... Same with other settings like taskbar personalized settings. ... >> All local security settings will be displayed, ... >> given as to whether or not a given security setting is defined by Group ... > general page to find out your operating system. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Local security settings - secedit
      ... I don't believe you can export the true local security settings of a domain ... For Windows 2003 when you are ... settings for the computer's security policy. ...
      (microsoft.public.win2000.security)
    • Re: Group Policy Issues
      ... Same with other settings like taskbar personalized settings. ... > "The Group Policy security settings that apply to this machine could not ... > All local security settings will be displayed, ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Question about local security settings vs GPOs
      ... >>When I start SECPOL.MSC on one of my XP workstations in ... >>2000 domain and I look at the local security settings I ... >>LSDOU was the way policies are ...
      (microsoft.public.win2000.group_policy)
    • Re: How to apply local auditing through secedit
      ... the Local Security Policy snapin is a local policy store for those ... of those settings via secedit is working properly because the analysis ... > the secedit command, which I must say, has to be the most confusingly ...
      (microsoft.public.win2000.security)