secedit help

  • Thread starter Thread starter Nobody
  • Start date Start date
N

Nobody

Hello, I have been trying to secure my workgroup's
Windows 2000 machines with the command line based
program, secedit, The particular operation I am trying to
complete is, I am trying to disable remote logins. If
anybody really know how to use this tool and can help me,
please email me (my main mail server has been compromised
(that is the reason for this post) so I am using hotmail
for now) at (e-mail address removed)


Thank You for any help you can provide,
Damon Smith
 
See the link below on using secedit. First you have to configure or create a
template to import. You can do the with the help of the templates and Security
Configuration and Analysis mmc snapins. The template you use will override any
settings in the current database. You could create a template and import it such
as " secedit /configure /db c:\winnt\security\database\secedit.sdb /cfg
yourtemplate.inf " you would need to specify full path to your .inf file. The
settings defined in the template would override any currently defined settings
in the security database. Another option is to create templates and simply
import them into the Local Security Policy of a computer. -- Steve


http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/w
indowsserver2003/proddocs/standard/Secedit_cmds.asp
http://tinyurl.com/pqus --- Same as above, shorter link.
http://www.brienposey.com/kb/working_with_windows_2000_security_templates,_part_
1.asp
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q313434
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q321679
 
Thank you for your help, I have created a template, and
applied it to most of my machines, but, some of my
machines also run Windows XP, is there a tool to convert
(or can you use the same file) a Windows 2000 template to
a Windows XP template, and Vica Verca?
 
-----Original Message-----
Thank you for your help, I have created a template, and
applied it to most of my machines, but, some of my
machines also run Windows XP, is there a tool to convert
(or can you use the same file) a Windows 2000 template to
a Windows XP template, and Vica Verca?
.
Click to expand...

Correction, I would like to convert the .sdb file, not
the template
 
I believe you can use the same .sdb file that you imported the template into
[not the secedit.sdb file however] as long as the defined settings exist on
the XP machine. Obviously there are some differences in the security
database. What you could to is copy the .sdb file you created to an XP
machine and then run the Security Configuration and Analysis tool using that
..sdb file and do the analysis to see if the results are as expected. If
analysis proceeds well, then configure one XP test box with the secedit
command. If everything blows up, see KB link below on how to reset defined
security settings back to default using secedit paying special attention on
how to use the /areas option to reset just certain parts of the security
configuration. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
 
Back
Top