Re: Location of local policies
- From: "Mark Burnett" <mb@xxxxxxxx>
- Date: Fri, 16 Feb 2007 13:02:29 -0700
It depends on which policies you are talking about. Normall the local policy settings are stored in the local security database, which is normally at C:\WINDOWS\security\Database\secedit.sdb. Many settings are loaded directly from that file upon refreshing the group policy (including startup or login).
There are, however, many settings that are also stored in the Registry. Most programs will retrieve these settings from directly from the Registry, therefore the local group policy sets these values from the sdb file. If there is no value in the sdb file for a particular key it will stay as it is. So you can set most registry values directly in the registry unless there is a policy that overrides it.
On a domain controller there is also a local Domain Controller Security Policy that is located at C:\WINDOWS\SYSVOL\sysvol\...\...\{6AC1786C-016F-11D2-945F-00C04fB984F9}
I'm not sure why you want to know the storage location of these objects, but if you are looking to edit them directly, the secedit.sdb file is a form of a jet database that uses undocumented API functions and you can really only access that data using secedit.exe and security templates.
The domain controller's local policy is a text file at C:\WINDOWS\SYSVOL\sysvol\...\...\{6AC1786C-016F-11D2-945F-00C04fB984F9}\MACHINE\Microsoft\Windows NT\SecEdit\GptTmpl.inf
You can actually edit this file and have the changes recognized if you increment the version number in C:\WINDOWS\SYSVOL\sysvol\...\...\{6AC1786C-016F-11D2-945F-00C04fB984F9}\GPT.ini
Perhaps if you shared what you are trying to accomplish I could give you some more useful information.
Mark Burnett
http://xato.net
"arielqs" <arielqs@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:69819DAF-79D5-4B42-89A7-B26AAF9C9F7B@xxxxxxxxxxxxxxxx
Hi, does someone know something about the location of local policies? Some
people say that local policies are stored in the windows registry, but I am
not sure.
If someone can answer me and give me a formal reference about this, it would
be wonderful.
Thanks,
.
- Prev by Date: Re: Location of local policies
- Next by Date: Re: Win32:ShareAll-H
- Previous by thread: Re: Location of local policies
- Index(es):
Relevant Pages
|
