secpol.msc

  • Thread starter Thread starter Mossie
  • Start date Start date
M

Mossie

I know this is not available in Home Premium but is there a way to add
it, or a third part program with the same uses?

Mossie
 
Mossie said:
I know this is not available in Home Premium but is there a way to add
it, or a third part program with the same uses?
Click to expand...

Some, but not all, of the settings in there can be added using this utility
from MVP Doug Knox -
http://www.dougknox.com/xp/utils/xp_securityconsole.htm.

Or you can download a spreadsheet from
http://www.microsoft.com/downloads/details.aspx?familyid=7821C32F-DA15-438D-8E48-45915CD2BC14
that lists all policies and the registry keys that control the setting.
 
Tom said:
Some, but not all, of the settings in there can be added using this
utility from MVP Doug Knox -
http://www.dougknox.com/xp/utils/xp_securityconsole.htm.

Or you can download a spreadsheet from
http://www.microsoft.com/downloads/details.aspx?familyid=7821C32F-DA15-438D-8E48-45915CD2BC14
that lists all policies and the registry keys that control the setting.
Click to expand...
Thanks for the links. Will check them out. I am trying to adjust the
behaviour of UAC in vista and was told that secpol.msc is the best way
to achieve this without totally disabling it.
 
Mossie said:
I know this is not available in Home Premium but is there a way to add it,
or a third part program with the same uses?

Mossie
Click to expand...

Chances are you can achieve whatever tweak it is that you are trying to
achieve via other tools that are already present in Windows eg regedit or
the built-in command line commands.
 
Mossie said:
Thanks for the links. Will check them out. I am trying to adjust the
behaviour of UAC in vista and was told that secpol.msc is the best way to
achieve this without totally disabling it.
Click to expand...


You can adjust them in the registry here

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]

These are the main keys that affect UAC, equivalent to the secpol.msc
settings.

"ConsentPromptBehaviorAdmin"
"ConsentPromptBehaviorUser"
"EnableInstallerDetection"
"EnableLUA"
"EnableSecureUIAPaths"
"EnableVirtualization"
"PromptOnSecureDesktop"
"ValidateAdminCodeSignatures"
"FilterAdministratorToken"
 
Mossie said:
Thanks for the links. Will check them out. I am trying to adjust the
behaviour of UAC in vista and was told that secpol.msc is the best way
to achieve this without totally disabling it.
Click to expand...

See my other reponse - or continue reading:

Tried to cancel my earlier response, if it shows up anyway please ignore as
that utility is for XP. I'm not aware of one that has been created for
Vista, but the spreadsheet available at
http://www.microsoft.com/downloads/details.aspx?FamilyID=41dc179b-3328-4350-ade1-c0d9289f09ef
lists all of the policies and their associated registry keys.
 
It's not secpol.msc, it's gpedit.msc. I don't know why your version of Vista would not
have these utilities...

Turning off UAC (User Account Control)
1. Open GPEDIT.MSC and then disable everything beginning with "User Account Control" under Computer
Configuration/Windows Settings/Security Settings/Local Policies/Security Options.

2. You can also turn off UAC in Control Panel, User Accounts. Click the link there that reads Change
security settings, then Turn User Account Control Off.
 
JP said:
It's not secpol.msc, it's gpedit.msc. I don't know why your version of
Vista would not
have these utilities...

Turning off UAC (User Account Control)
1. Open GPEDIT.MSC and then disable everything beginning with "User
Account Control" under Computer Configuration/Windows Settings/Security
Settings/Local Policies/Security Options.

2. You can also turn off UAC in Control Panel, User Accounts. Click the
link there that reads Change security settings, then Turn User Account
Control Off.
Click to expand...


Secpol.msc's items are a subset of gpedit.msc, and the OP is not trying to
turn off UAC, but to reduce the prompts to the highest level.

ss.
 
JP said:
It's not secpol.msc, it's gpedit.msc. I don't know why your version of
Vista would not
have these utilities...

Turning off UAC (User Account Control)
1. Open GPEDIT.MSC and then disable everything beginning with "User
Account Control" under Computer Configuration/Windows Settings/Security
Settings/Local Policies/Security Options.
Click to expand...

Yeah, the 'Security Settings' node of that branch of gpedit.msc is where
secpol.msc starts. Neither are in Home Premium.

It's a pity it's not in Home Premium, but I believe it's possible to achieve
the same results via other means.

2. You can also turn off UAC in Control Panel, User Accounts. Click the
link there that reads Change security settings, then Turn User Account
Control Off.
Click to expand...

True. I believe this is equivalent to setting "EnableLUA" to 0 and
rebooting.
 
Back
Top