secedit question - remove database and template files after applying?

Hello,

going to be including a secedit command in a script running on server 2008
such as:

SECEDIT /configure /db PassPol.sdb /cfg PassPol.inf /log secedit.log

after running this command the PassPol.sdb file is created in the current
directory, which is also where the PassPol.inf file is located.

1. after the command completes can I delete the PassPol.sdb and PassPol.inf
files?

2. where do these settings go after this runs? registry? other config files?

any input is appreciated, thanks.

Hello James,

Start here for 2008:
http://technet.microsoft.com/en-us/l.../cc730742.aspx

If you delete the database how should it work? The policy settings are basically
registry changes.

http://technet.microsoft.com/en-us/l.../cc731004.aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> going to be including a secedit command in a script running on server
> 2008 such as:
>
> SECEDIT /configure /db PassPol.sdb /cfg PassPol.inf /log secedit.log
>
> after running this command the PassPol.sdb file is created in the
> current directory, which is also where the PassPol.inf file is
> located.
>
> 1. after the command completes can I delete the PassPol.sdb and
> PassPol.inf files?
>
> 2. where do these settings go after this runs? registry? other config
> files?
>
> any input is appreciated, thanks.
>

see inline:

"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news: .com...
> Hello James,
>
> Start here for 2008:
> http://technet.microsoft.com/en-us/l.../cc730742.aspx

I asked a pretty specific question, using secedit, not scw. I realize the
info you have directed me to would help with an overall understanding of sec
pol management in 2k8 but that is not what I am looking for right now.

>
> If you delete the database how should it work?

well, I deleted what I was asking about, and the settings are still applied?
and visible in the local sec pol console?

The policy settings are basically
> registry changes.

that has always been my understanding, but I was recently told otherwise.
The reason I am using secedit is that I was told if I make the reg changes
directly they will not be reflected when using gui tools such as local sec
pol console. But this is a side note really... I am really just trying to
find out if I can remove the .sdb and .inf template files after I have used
secedit to apply the template? I'm sure someone who knows what they are
talking about could answer this with a few sentences of background as to why
or why not.

anyone?

>
> http://technet.microsoft.com/en-us/l.../cc731004.aspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hello,
>>
>> going to be including a secedit command in a script running on server
>> 2008 such as:
>>
>> SECEDIT /configure /db PassPol.sdb /cfg PassPol.inf /log secedit.log
>>
>> after running this command the PassPol.sdb file is created in the
>> current directory, which is also where the PassPol.inf file is
>> located.
>>
>> 1. after the command completes can I delete the PassPol.sdb and
>> PassPol.inf files?
>>
>> 2. where do these settings go after this runs? registry? other config
>> files?
>>
>> any input is appreciated, thanks.
>>
>
>