|Subject:||What is correct way to create secedit.sdb file?|
|Posted by:||email@example.com (firstname.lastname@example.org)|
|Date:||11 Apr 2007|
A couple weeks ago I re-created my secedit.sdb file on Windows 2000
Pro workstation by exporting the security policy to a .inf file from
the secpol.msc console, editing the .inf file to suit my needs,
deleting the secedit.sdb file, and then importing the .inf file from
the secpol.msc console (which re-created the secedit.sdb file).
But there seems to be a lot of varying information out there about how
to re-create secedit.sdb, and I want to make sure that I didn't miss
something that might cause subtle problems.
Some sources say that before re-creating secedit.sdb, you need to
delete all of the files directly under c:\winnt\security in addition
to deleting the c:\winnt\security\database\secedit.sdb file.
Other sources say that you need to delete all of the files in c:\winnt
\security\logs in addition to deleting secedit.sdb.
Some sources also say that you should reboot the computer after
So do I need to delete any files (besides secedit.sdb) and/or reboot
the computer before re-creating secedit.sdb?