Re: Group Policy Defaults

From: Nick Finco [MS] (nfinco@online.microsoft.com)
Date: 03/27/03 

From: "Nick Finco [MS]" <nfinco@online.microsoft.com>
Date: Wed, 26 Mar 2003 18:25:14 -0800

You are correct for Win2k.

On WinXP and WS2003, the Local Group Policy Object for security settings was
removed. The settings displayed in the Local Security Settings snapin now
edit the current settings on the system, not a LGPO that is applied at every
policy refresh. Thus, using secedit /configure is the same as using the
import functionality of the snapin.

N 

-- 
This posting is provided "AS IS" with no warranties, and confers no rights.
"Roger Abell [MVP]" <mvpNOSPAM@asu.edu> wrote in message
news:ekHzoS58CHA.2052@TK2MSFTNGP11.phx.gbl...
Note that as given these two have different effects.
The first will reset the security policies, the second will
also reapply settings for filesystem, registry, services, etc.
For what the poster indicates, the first option seems the
way to go.
-- 
Roger
"Nick Finco [MS]" <nfinco@online.microsoft.com> wrote in message
news:#3GuLzv8CHA.1600@TK2MSFTNGP10.phx.gbl...
> Open the Local Security Policy, right click on Security Settings, and
choose
> Import Policy.  Navigate to your windows directory, then 'security', then
> 'templates'.  Double click on 'Setup Security.inf' to configure that to
your
> system.
>
> Another way you can do this is to open a command prompt and execute
'secedit
> /configure /cfg "%windir%\security\templates\setup security.inf" /db
> "%windir%\security\database\ss.sdb"'.
>
> This will get you back to your system defaults.
>
> N
>
> -- 
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
> "Matt" <mattw@lifelinestechnology.com> wrote in message
> news:37f201c2f2fb$1f2867d0$a401280a@phx.gbl...
> > Whats the quickest way to reset group policy to its
> > default settings on an xp pro system, locally.  There isnt
> > a domain policy on this system yet. I was playing around
> > with local policy settings and somehow locked admin and
> > every user out.  I finally got back in as admin, but cant
> > get the policy to reset to its default settings. Thanks in
> > advance.
> > Matt
>
>

Relevant Pages

  • Re: Local GPO
    ... When you look at the local security policy on a member what you see are the ... Preferences are settings in the registry that are not ... > to use the Default Domain Controllers Policy linked to the Domain ...
    (microsoft.public.windows.group_policy)
  • Re: security log files
    ... be set to do not overwrite events when log becomes full. ... Check the "effective" local security policy of the machine ... > auditing to audit failures for most of the settings. ...
    (microsoft.public.win2000.security)
  • Re: HELP!!! Unable to logon to Server 2000
    ... Any domain or Organizational Unit Group Policy that is enabled will override ... Local Security Policy defined settings assuming everything is configured ... Security Policy and that will override the Local Security Policy for those ... I would first double check the Domain Controller Security ...
    (microsoft.public.win2000.security)
  • Re: Local Account & Password Policy Options Greyed out for Admins?
    ... it seems to have set the security settings back to what they should be. ... Still, the settings for the password and account lockout policies are greyed out, so they still cannot be changed. ... Reboot the computer and you should be able to change password policy in Local Security Policy. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Help - with Policy
    ... a.GPO Policy with only Loopback enabled and security settings (Authenticated ... b.GPO with settings to be applied. ... Policy was applied sucessfully to users in the Security Group. ... Do not touch the security settings. ...
    (microsoft.public.windows.group_policy)