Re: security Templates

From: Nick Finco [MSFT] (nfinco_at_online.microsoft.com)
Date: 05/08/03 

Date: Thu, 8 May 2003 10:24:58 -0700

That's odd. I just checked a XP box and the Export policy was missing for
me too. Sorry about the confusion.

That means the only way to export local policy on XP is to create a security
template that defines every setting you are interested in (using the
Security Templates mmc snapin). Then use secedit /generaterollback to dump
the machine settings into a security template. You can retrieve most of the
settings by running 'secedit /generaterollback /cfg
"%windir%\security\templates\setup security.inf" /rbk CurSettings.inf'.

N 

-- 
This posting is provided "AS IS" with no warranties, and confers no rights.
Any included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Marek" <marekzale@mindspring.com> wrote in message
news:053e01c31506$48e37880$a101280a@phx.gbl...
> Thanks Nick,
> However, I don't have an option to Export... I have an
> option to Export List, but I don't believe that it's the
> same thing... It seems that there is something alse to
> it...
> >-----Original Message-----
> >That only works for Win2k.  On WinXP, the local policy
> store is empty so the
> >security template exported that way is also empty.
> That's why the analysis
> >results turn up empty.  Enter the Local Security
> Settings snapin (secpol.msc
> >at the command line), right click on Security Settings,
> and choose Export.
> >The security template generated from there will be what
> you are looking for.
> >
> >N
> >
> >-- 
> >This posting is provided "AS IS" with no warranties, and
> confers no rights.
> >Any included script samples are subject to the terms
> specified at
> >http://www.microsoft.com/info/cpyright.htm
> >
> >
> >"Peter Clark" <clark@hushmail.com> wrote in message
> >news:07b301c3142a$31a896a0$2f01280a@phx.gbl...
> >> start -> run -> cmd
> >> c:\>secedit /export /cfg c:\foo.inf
> >>
> >> this will export an imported template only + plus it
> will
> >> only export certain areas of the security policy, ie
> >> efs/software restrictions and ipsec are not included.
> how
> >> have you setup your security settings? via template
> >> creation or configuring the machine directly?
> >>
> >>
> >> >-----Original Message-----
> >> >Please help with Security Templates... How can I
> export
> >> >current Local Security Settings to a file so that I
> can
> >> >use it to configure other PCs on the net???
> >> >Thanks
> >
> >
> >.
> >

Relevant Pages

  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... > Server Security and Auditing Policy ... > This list only includes links in the domain of the GPO. ... > The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... >> Server Security and Auditing Policy ... >> The settings in this GPO can only apply to the following groups, users, ... >> Windows Firewall: Allow file and printer sharing exception Enabled ...
    (microsoft.public.win2000.group_policy)
  • Re: CompanyWeb - Password Dialogue Box in Terminal Server only
    ... Configure trusted sites and security settings of IE using policy ... one XP workstation with the problematic user account and setup RDP session ...
    (microsoft.public.windows.server.sbs)
  • Group Policy Case Solved
    ... I began with the "Security Options" under the Computer ... I modified the group policy from my Windows XP Pro workstation using ... many more settings than Windows 2000 does; ...
    (microsoft.public.win2000.security)
Loading