Resetting Windows Security settings to Default

  • Thread starter Thread starter MSawyer
  • Start date Start date
M

MSawyer

Currently, I'm having issues with one of my desktops. We
have a tivoli system in the works of being set up, and I'm
not the only one with my hand in the pot. One of the
machines has security settings that require the passwords
to be "Strong Passwords". Now, unfortunately I've been
told by my people that I have to remove this to allow the
password they already have set. The reason is because
several hundered other computers require the use of this
password. I'm down to one computer being unable to use
the password. Someone else placed some additional
security measures that seem to be over-riding the current
settings. I'm looking for a way to reset the security
settings to the standard win2k install setting. I've
already worked with secedit, gpedit.msc, and secpol.msc to
no avail. Any assistance would be greatly appreciated
 
You can use GPRESULT to see if this machine is getting a group policy from
the domain. Group policy processing is Local -> Site -> Domain -> OU...so
is this machine in an OU that the other machines are not? Do you see 1704
events in the application log of this machine indicating group policy is
applying correctly?

Is this the secedit command you used?
"Secedit /configure /cfg <drive>:\winnt\repair\secsetup.inf /db
secsetup.sdb" (without the quotation marks)


IBTerry [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.
 
GPRESULT:
When I ran this, it showed that the last security
configuration change was made on 06 DEC 2003 (The most
recent time i logged in - timezone is South Korea +9hrs).
All policies were shown to be received from "local Group
Policy"

After I attempted to reset the security settings
initially, I found no change in the event logs to show
that the security settings were changed.

The Secedit command I used was:
"Secedit /configure /cfg
winnt\security\templates\security.inf /db
winnt\security\database\secedit.sdb"

now currently, the only SDB files I have are:
sysmain, msimain, secedit, spsecupd, and DMS

Additionally the security settings are preventing me from
connecting to the domain at the current time.

Any additional assistance would be appreciated.
 
Hello,
Try the command below...

If this is a domain controller...

"Secedit /configure /db C:\winnt\temp\temp.mdb /Cfg
c:\winnt\inf\defltdc.inf /overwrite"

If it's a workstation use this command..

"Secedit /configure /db C:\winnt\temp\temp.mdb /Cfg
c:\winnt\inf\defltwk.inf /overwrite"

If member server...

"Secedit /configure /db C:\winnt\temp\temp.mdb /Cfg
c:\winnt\inf\defltsv.inf /overwrite"

If you run into a "Data is invalid" error use the article below.

250454 Error Returned Importing Security Template
http://support.microsoft.com/?id=250454

This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top