Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Can I use secedit.exe to export out the "Security Options" from the local security policy and then import them on another machine?

I'm trying to do this on Windows Server 2008.

Update

I just tried with:

secedit /export /db C:\andy.db /cfg C:\andy.inf /areas SECURITYPOLICY /log C:\andy.log

But it didn't work with error:

Warning 2: The system cannot find the file specified.
    Error opening C:\andy.db.

Where do I get the DB file from?

share|improve this question
    
It would appear so from looking at the information available from running secedit /export /? and secedit /import /? at the command prompt. –  joeqwerty Feb 20 '12 at 19:55
    
Thanks @joeqwerty I'm just trying to figure out to get them to work now :-) –  Andy Arismendi Feb 20 '12 at 19:57

1 Answer 1

I had to do the same thing a while ago to setup a Server Core system with a security policy. Here are my scratch notes:

Export:

secedit /export /db secedit.sdb /cfg sctest.inf 

Import:

# NOTE: May not work if you're in a read-only directory, 
#       or sctest.inf is read-only
secedit /configure /db secedit.sdb /cfg sctest.inf /overwrite 
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.