Windows 2000 Commands Pocket Reference

Name

secedit

Synopsis

secedit /action [options]

Verify or refresh system security and manipulate security templates. (In this text, we consider only the former functionality; see the ntbooks documentation for details.) The /action option specifies the operation to perform.

secedit /RefreshPolicy Machine_Policy | UserPolicy ^ 
    [/Enforce]

Reapply computer or user security settings to all Group Policy Objects. /Enforce forces the refresh even if the settings have not changed.

secedit /Export /Cfg template-file [/Areas list] ^
     [/MergedPolicy][/Log file] [/Verbose | /Quiet]

Export security policy settings (merging domain and local policies if /MergedPolicy is included) to template-file, limiting settings to the space-separated list of specified areas (SecurityPolicy, Group_Mgmt, User_Rights, RegKeys, FileStore, Services), if applicable.

secedit /Analyze /Cfg template-file /DB newfile.sdb ^
     /Log file [/Verbose| /Quiet]

Compare current system security settings to those stored in the specified template file, sending the results to the specified log file. In this case, the /DB option specifies the name of a new security database file to create and use to perform the analysis; the settings in the specified template file are imported into it for this purpose.

secedit /Configure /Cfg template-file /DB file.sdb^ 
    [/Areas list][/Overwrite] [/Log file] ^ 
    [/Verbose | /Quiet]

Apply the template stored in the specified file to the system, limiting settings to the specified areas, if applicable. The database ...