Security config and analysis tool rollback

  • Thread starter Thread starter Mark
  • Start date Start date
M

Mark

Is there an easy way to roll back changes made with security configuration
and analysis tool? I know it uses the JET database engine to process and
log the changes, but I have not seen any information about how to roll back
or reverse changes. TIA.

Mark
 
Hello Mark

In order to do this you would need to use the secedit command to generate a
rollback file that then could be used to do what you are asking.

This is from Win/XP but Win/2K3 has the same feature. I believe Win/2K3's
syntax is slightly different though.
secedit /GenerateRollback /CFG FileName.inf /RBK
SecurityTemplatefilename.inf [/log RollbackFileName.inf] [/quiet]



Cheers,

Richard
 
Spyke,

Thanks for the info. I did not know that this was added in W2K3/XP.
Unfortunatly, I am working with W2K and is seems that this is not an option.
I wonder if I can use the secedit.exe from W2K3 on W2K...? Thanks.

Mark
Spyke said:
Hello Mark

In order to do this you would need to use the secedit command to generate a
rollback file that then could be used to do what you are asking.

This is from Win/XP but Win/2K3 has the same feature. I believe Win/2K3's
syntax is slightly different though.
secedit /GenerateRollback /CFG FileName.inf /RBK
SecurityTemplatefilename.inf [/log RollbackFileName.inf] [/quiet]



Cheers,

Richard

Mark said:
Is there an easy way to roll back changes made with security configuration
and analysis tool? I know it uses the JET database engine to process and
log the changes, but I have not seen any information about how to roll back
or reverse changes. TIA.

Mark
Click to expand...
Click to expand...
 
Not after the fact unless you did as Richard posted ahead of time. You can use
secedit command to reset security to defined default settings as described in the KB
link below and you can also use secedit /export to create a template of most of your
security settings, just be sure to check the results of the template after the
export. The Group Policy Management Console can be used to manage Group/Security
policy. For W2K you would need to use a XP Pro domain machine. The GPMC is a
significant advancement in managing Group Policy. --- Steve

http://www.microsoft.com/windowsserver2003/gpmc/default.mspx
http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
http://www.microsoft.com/technet/tr...server2003/proddocs/standard/Secedit_cmds.asp
 
Back
Top