Can I use secedit.exe to export out the "Security Options" from the local security policy and then import them on another machine?

I'm trying to do this on Windows Server 2008.


I just tried with:

secedit /export /db C:\andy.db /cfg C:\andy.inf /areas SECURITYPOLICY /log C:\andy.log

But it didn't work with error:

Warning 2: The system cannot find the file specified.
    Error opening C:\andy.db.

Where do I get the DB file from?

  • It would appear so from looking at the information available from running secedit /export /? and secedit /import /? at the command prompt. – joeqwerty Feb 20 '12 at 19:55
  • Thanks @joeqwerty I'm just trying to figure out to get them to work now :-) – Andy Arismendi Feb 20 '12 at 19:57

I had to do the same thing a while ago to setup a Server Core system with a security policy. Here are my scratch notes:


secedit /export /db secedit.sdb /cfg sctest.inf 


# NOTE: May not work if you're in a read-only directory, 
#       or sctest.inf is read-only
secedit /configure /db secedit.sdb /cfg sctest.inf /overwrite 

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.