Re: Group Policy Defaults

From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Date: 03/27/03 

From: "Roger Abell [MVP]" <mvpNOSPAM@asu.edu>
Date: Wed, 26 Mar 2003 21:45:47 -0700

Thanks Nick,

Is this some sort of special handling for setup security.inf ?
Set me a little straighter and shorten my experiments would you ?

I do understand what you are saying about there no longer being
a lgpo, but I am not following how this changes the differences
between an import of security policy out of a template as compared
to a secedit /cfg without use of /areas

If I define a template and set a service startup and its security and
a filesystem object's ACL, analyze against this just for fun and see
what it would change, and then import this neither setting in the
template is applied (as expected). However, if I use secedit /cfg
and let it do all of the template the NTFS and service get adjusted. 

-- 
Roger 
"Nick Finco [MS]" <nfinco@online.microsoft.com> wrote in message news:#SGiagA9CHA.2596@TK2MSFTNGP11.phx.gbl...
> You are correct for Win2k.
> 
> On WinXP and WS2003, the Local Group Policy Object for security settings was
> removed.  The settings displayed in the Local Security Settings snapin now
> edit the current settings on the system, not a LGPO that is applied at every
> policy refresh.  Thus, using secedit /configure is the same as using the
> import functionality of the snapin.
> 
> N
> 
> -- 
> This posting is provided "AS IS" with no warranties, and confers no rights.
> 
> 
> "Roger Abell [MVP]" <mvpNOSPAM@asu.edu> wrote in message
> news:ekHzoS58CHA.2052@TK2MSFTNGP11.phx.gbl...
> Note that as given these two have different effects.
> The first will reset the security policies, the second will
> also reapply settings for filesystem, registry, services, etc.
> 
> For what the poster indicates, the first option seems the
> way to go.
> 
> -- 
> Roger
> 
> "Nick Finco [MS]" <nfinco@online.microsoft.com> wrote in message
> news:#3GuLzv8CHA.1600@TK2MSFTNGP10.phx.gbl...
> > Open the Local Security Policy, right click on Security Settings, and
> choose
> > Import Policy.  Navigate to your windows directory, then 'security', then
> > 'templates'.  Double click on 'Setup Security.inf' to configure that to
> your
> > system.
> >
> > Another way you can do this is to open a command prompt and execute
> 'secedit
> > /configure /cfg "%windir%\security\templates\setup security.inf" /db
> > "%windir%\security\database\ss.sdb"'.
> >
> > This will get you back to your system defaults.
> >
> > N
> >
> > -- 
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> >
> >
> > "Matt" <mattw@lifelinestechnology.com> wrote in message
> > news:37f201c2f2fb$1f2867d0$a401280a@phx.gbl...
> > > Whats the quickest way to reset group policy to its
> > > default settings on an xp pro system, locally.  There isnt
> > > a domain policy on this system yet. I was playing around
> > > with local policy settings and somehow locked admin and
> > > every user out.  I finally got back in as admin, but cant
> > > get the policy to reset to its default settings. Thanks in
> > > advance.
> > > Matt
> >
> >
> 
>

Relevant Pages

  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... > Server Security and Auditing Policy ... > This list only includes links in the domain of the GPO. ... > The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... >> Server Security and Auditing Policy ... >> The settings in this GPO can only apply to the following groups, users, ... >> Windows Firewall: Allow file and printer sharing exception Enabled ...
    (microsoft.public.win2000.group_policy)
  • Re: CompanyWeb - Password Dialogue Box in Terminal Server only
    ... Configure trusted sites and security settings of IE using policy ... one XP workstation with the problematic user account and setup RDP session ...
    (microsoft.public.windows.server.sbs)
  • Group Policy Case Solved
    ... I began with the "Security Options" under the Computer ... I modified the group policy from my Windows XP Pro workstation using ... many more settings than Windows 2000 does; ...
    (microsoft.public.win2000.security)