Validation
Secedit can be used to validate a configuration file. This validation makes sure the file syntax is correct. The command to perform this operation is
secedit /validate filename
Refresh
The refresh option of secedit provides a mechanism to refresh the system security policy. This command reapplies the security policy to the local machine. The syntax for the command is
secedit /refreshpolicy [machine_policy or user_policy] [/enforce]
The following parameters may be provided:
- machine_policy This specifies that the security policy for the local machine should be refreshed.
- user_policy This specifies that the security settings for the local user that is currently logged into the system should be refreshed.
- /enforce This specifies that the policy should be refreshed even if there have been no changes.
This command can be used to make sure the system is using the appropriate security policy.
In this tutorial:
- Windows 2000 Security Issues
- Setting up the System
- Local Security Policy Settings
- Logon Message
- LAN Manager Authentication Level
- System Configuration
- File Systems
- Network
- Account Settings
- USER MANAGEMENT
- Setting File Permissions
- System Management
- Analysis
- Configuration
- Validation
- Export
- Auditing a System
- Log Files
- Looking for Suspicious Signs
- Missing Log Files or Gaps in the Log Files
- Unknown Processes