Re: SECEDIT MMC and security templates

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 11/12/03 

Date: Wed, 12 Nov 2003 09:33:58 -0700

I have not tried the immediate delete. The temp
sdb can be used to reapply those settings that were
imported into it. XP has the habit of lazy handle
release, which means that files are often not immediately
seen as not in use when in fact their use is over, so this
may get in your way. 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
<anonymous@discussions.microsoft.com> wrote in message
news:0d3d01c3a930$b0adcb50$a401280a@phx.gbl...
> Excellent!
> I successfully ran through this and the Database did
> create.  You mentioned this is just s temp file... Can
> this be deleted after secedit runs, or would I have to
> reboot first then delete it.  I was thinking about
> putting a del secsetup.sdb at the end of my batch file.
> Do you see any problems with this approach?
> Thanks so much for the help
> >-----Original Message-----
> >With secedit you can just provide any name for
> >the sdb and it will create one for use as a temp
> >database while it compiles what is to be applied.
> >
> >-- 
> >Roger Abell
> >Microsoft MVP (Windows Server System: Security)
> >MCSE (W2k3,W2k,Nt4)  MCDBA
> ><anonymous@discussions.microsoft.com> wrote in message
> >news:05ba01c3a929$ebf3e9d0$a001280a@phx.gbl...
> >> How exactly do i roll out the template without the
> >> database.  If I use SECEDIT it requres a database
> doesn't
> >> it.  How can I just apply the inf.  I have tried right
> >> clicking the file and choosing install but only about
> 1/3
> >> of the settings stick when doing that.  When using the
> >> Analysis and Config snapin it requires a database as
> >> well....   Or am I incorrect?  If so what is the proper
> >> way to do this without using a SDB file?
> >> >-----Original Message-----
> >> >Not sure about the log on to the workgroup issue,
> >> >but as there is no such thing I assume this has to
> >> >do with how the Novell piece ties into Windows.
> >> >
> >> >I would suggest that you deploy to other machines
> >> >by using the template, not the sdb.  Use secedit or
> >> >the Analysis and Configuration snap-in to apply
> >> >the template to the machine.
> >> >
> >> >-- 
> >> >Roger Abell
> >> >Microsoft MVP (Windows Server System: Security)
> >> >MCSE (W2k3,W2k,Nt4)  MCDBA
> >> >"Matt Fiddelke" <anonymous@discussions.microsoft.com>
> >> wrote in message
> >> >news:0bf801c3a86d$59866f30$a001280a@phx.gbl...
> >> >> Here is the deal.  I designed/altered security
> >> templates
> >> >> using MMC and saved them.  I have a few questions
> about
> >> >> deploying them though.  I deploy them I have to
> have an
> >> >> sdb database file.  I've created this computer with
> the
> >> >> poper snap-in.  I have successfully deployed the
> >> template
> >> >> on my local machine, but when I run it on another PC
> >> >> sometimes after changing the settings the machine
> >> >> attempts to login to a workgroup as if it was a
> domain.
> >> >> I'm running Netware 5.1 and instead of the default
> >> >> setting being the local computer it changes it to a
> >> work
> >> >> group.  Why is this?  Also can i use the database I
> >> >> created via my machine to configure the other
> machines?
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >

Relevant Pages

  • Re: A tool to manage security and reset default file and folder permissions
    ... as well as other questions related to system security. ... >template really does not effect all of the initial config. ... >notice that there is a checkbox to clear the database before import. ... one can modify settings in the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: A tool to manage security and reset default file and folder permissions
    ... nearly wiped out my original security settings with the wrong template. ... nearly restore my original security settings the I had originally tweaked. ... |>> notice that there is a checkbox to clear the database before import. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: SECEDIT MMC and security templates
    ... How exactly do i roll out the template without the ... If I use SECEDIT it requres a database doesn't ... way to do this without using a SDB file? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: SECEDIT MMC and security templates
    ... database while it compiles what is to be applied. ... If I use SECEDIT it requres a database doesn't ... > way to do this without using a SDB file? ... >>by using the template, not the sdb. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: question on setting security
    ... a sdb in merge mode, they are merged, but not as you expect. ... the last-loaded IIS template needs to state ... both ASPNET and Guests for the Deny local logon settings. ... the original template. ...
    (microsoft.public.windows.server.security)