Local Security Policy

[Guest]

Hi

Is there anyone knows how to show "Local Security Policy" in Control Panel

What are the components for it

When can I find the list of components? For example: If I want to know the components of "Local Security Policy", I just type string "Local Security Policy" and get the list of the components needed for this function. So that I don't have to post more questions about the components for each function

Thanks in advance

Bin

 

[Gordon Smith \(eMVP\)]

Look for the component that contains secpol.msc.

--Gordon Smith (eMVP)

 

[KM]

Bin Xing,

This is just a XP/XPe terminology problem. There is no component with the "Local Security Policy" name. You are looking for
"Security Settings Editor" component.

--
KM,
BSquare Corporation

Hi,

Is there anyone knows how to show "Local Security Policy" in Control Panel?

What are the components for it?

When can I find the list of components? For example: If I want to know the components of "Local Security Policy", I just type

string "Local Security Policy" and get the list of the components needed for this function. So that I don't have to post more
questions about the components for each function.

 

[Guest]

Hi KM & Gordon Smith

Thank you so much for your reply

I have one more question about the security policy. Right now, I'm able to see "Local Security Policy" in Control Panel. And when I double click it, I can see popup window called "Local Security Settings". If I check "Local Policies\Security Options", I can see some settings in "Security Options". However, compared with Windows XP Professional, Windows XP Embedded has less settings in "Security Options", maybe I missed some components. For example, I can see security options about network in "Security Options" as below

-- Network Access: Allow anonymous SID/Name translatio
-- Network Security: Force logoff when logon hours expir

But I can't see the following settings, which I can see in Windows XP Professional

-- Network Access: let Everyone permissions apply to anonymous user
-- Network Access: Name Pipes that can be accessed anonymousl
-- Network Access: Remotely accessible registry path
-- Network Access: shares that can be accessed anonymousl
-- Network Access: sharing and security model for local account

I really need the network security on Windows XP Embedded because we have made some programs which based on those network security settings

Is there any component I missed, or some settings I didn't do

Thanks

Bi

----- KM wrote: ----

Bin Xing

This is just a XP/XPe terminology problem. There is no component with the "Local Security Policy" name. You are looking fo
"Security Settings Editor" component

-
KM
BSquare Corporatio

Hi

string "Local Security Policy" and get the list of the components needed for this function. So that I don't have to post mor
questions about the components for each function

 

[KM]

Bin Xing,

I am not sure if it is a bug or expected behavior.
Try including sceregvl.inf file into your image under %17% directory or just "install" the inf file at run time. There is,
unfortunately, no component that owns the file so you will need to either use your own custom component or TD Extra Files option.
I have not tried the sceregvl.inf at runtime but I am pretty sure it has many XP security policies in it.

--
KM,
BSquare Corporation

Hi KM & Gordon Smith,

Thank you so much for your reply.

I have one more question about the security policy. Right now, I'm able to see "Local Security Policy" in Control Panel. And when

I double click it, I can see popup window called "Local Security Settings". If I check "Local Policies\Security Options", I can see
some settings in "Security Options". However, compared with Windows XP Professional, Windows XP Embedded has less settings in
"Security Options", maybe I missed some components. For example, I can see security options about network in "Security Options" as
below:

 

[Guest]

Does anyone know it

Bi

----- Bin Xing wrote: ----

Hi KM & Gordon Smith

Thank you so much for your reply

I have one more question about the security policy. Right now, I'm able to see "Local Security Policy" in Control Panel. And when I double click it, I can see popup window called "Local Security Settings". If I check "Local Policies\Security Options", I can see some settings in "Security Options". However, compared with Windows XP Professional, Windows XP Embedded has less settings in "Security Options", maybe I missed some components. For example, I can see security options about network in "Security Options" as below

-- Network Access: Allow anonymous SID/Name translatio
-- Network Security: Force logoff when logon hours expir

But I can't see the following settings, which I can see in Windows XP Professional

-- Network Access: let Everyone permissions apply to anonymous user
-- Network Access: Name Pipes that can be accessed anonymousl
-- Network Access: Remotely accessible registry path
-- Network Access: shares that can be accessed anonymousl
-- Network Access: sharing and security model for local account

I really need the network security on Windows XP Embedded because we have made some programs which based on those network security settings

Is there any component I missed, or some settings I didn't do

Thanks

Bi

----- KM wrote: ----

Bin Xing

This is just a XP/XPe terminology problem. There is no component with the "Local Security Policy" name. You are looking fo
"Security Settings Editor" component

-
KM
BSquare Corporatio

Hi

string "Local Security Policy" and get the list of the components needed for this function. So that I don't have to post mor
questions about the components for each function

 

[Guest]

Hi KM

I tried to install sceregvl.inf at run time, but it didn't work and I still couldn't see the settings in "Security Options". I also tried to copy sceregvl.inf to directory \Windows\inf, it still didn't work. I rebooted machine and didn't work, either. I didn't try to rebuild the image with an extra file sceregvl.inf included in directory %17% because I guess it will be the same thing

But I do find all of the settings I need in sceregvl.inf. I guess the only thing I need to do is to load the settings into security database file \Windows\security\database\secedit.sdb. But how to do that? Does anyone know it

Thanks KM

Bi

----- KM wrote: ----

Bin Xing

I am not sure if it is a bug or expected behavior
Try including sceregvl.inf file into your image under %17% directory or just "install" the inf file at run time. There is
unfortunately, no component that owns the file so you will need to either use your own custom component or TD Extra Files option
I have not tried the sceregvl.inf at runtime but I am pretty sure it has many XP security policies in it

-
KM
BSquare Corporatio

Hi KM & Gordon Smith

I double click it, I can see popup window called "Local Security Settings". If I check "Local Policies\Security Options", I can se
some settings in "Security Options". However, compared with Windows XP Professional, Windows XP Embedded has less settings i
"Security Options", maybe I missed some components. For example, I can see security options about network in "Security Options" a
below

 

[KM]

Bin Xing,

scecli.dll is responsible for loading up the security policy settings from the sceregvl.inf.

So,
1. Make sure "Windows Security Configuration Editor Client Engine" is included in to your image. If you also add sceregvl.inf to
your image, there is an FBA registration command for scecli.dll library in the component resources. The scecli.dll will pick up the
sceregvl.inf automatically.

or

2. At run time, register the scecli.dll file (found in the %SystemRoot%\System32 directory) by executing regsvr32 scecli.dll. Of
course, the sceregvl.inf should be in the right place.

--
KM,
BSquare Corporation

Hi KM,

I tried to install sceregvl.inf at run time, but it didn't work and I still couldn't see the settings in "Security Options". I

also tried to copy sceregvl.inf to directory \Windows\inf, it still didn't work. I rebooted machine and didn't work, either. I
didn't try to rebuild the image with an extra file sceregvl.inf included in directory %17% because I guess it will be the same
thing.

But I do find all of the settings I need in sceregvl.inf. I guess the only thing I need to do is to load the settings into

security database file \Windows\security\database\secedit.sdb. But how to do that? Does anyone know it?

 

[Guest]

Hi KM

Thank you so much. I'll try it later, but I guess it's going to work

And I also found something similar as what you mentioned from Microsoft web site. Here is the link just in case someone else who is interested in it

http://msdn.microsoft.com/library/d...creatingcomponentforcustomsecuritytemplate.as

Thanks for both of you and have a good weekend. :-

Bi

----- KM wrote: ----

Bin Xing

scecli.dll is responsible for loading up the security policy settings from the sceregvl.inf

So
1. Make sure "Windows Security Configuration Editor Client Engine" is included in to your image. If you also add sceregvl.inf t
your image, there is an FBA registration command for scecli.dll library in the component resources. The scecli.dll will pick up th
sceregvl.inf automatically

o

2. At run time, register the scecli.dll file (found in the %SystemRoot%\System32 directory) by executing regsvr32 scecli.dll. O
course, the sceregvl.inf should be in the right place

-
KM
BSquare Corporatio

Hi KM

also tried to copy sceregvl.inf to directory \Windows\inf, it still didn't work. I rebooted machine and didn't work, either.
didn't try to rebuild the image with an extra file sceregvl.inf included in directory %17% because I guess it will be the sam
thing

 

[Doug Hoeffel]

Bin:

Search google groups for "sceregvl.inf Fincher". Jon Fincher [MS] solved
this for me a while back. He documented how to make the component for the
orphaned file sceregvl.inf.

HTH... Doug

Hi KM,

Thank you so much. I'll try it later, but I guess it's going to work.

And I also found something similar as what you mentioned from Microsoft

web site. Here is the link just in case someone else who is interested in
it.

http://msdn.microsoft.com/library/d...reatingcomponentforcustomsecuritytemplate.asp

Thanks for both of you and have a good weekend.

Bin

----- KM wrote: -----

Bin Xing,

scecli.dll is responsible for loading up the security policy settings from the sceregvl.inf.

So,
1. Make sure "Windows Security Configuration Editor Client Engine" is

included in to your image. If you also add sceregvl.inf to

your image, there is an FBA registration command for scecli.dll

library in the component resources. The scecli.dll will pick up the

sceregvl.inf automatically.

or

2. At run time, register the scecli.dll file (found in the

%SystemRoot%\System32 directory) by executing regsvr32 scecli.dll. Of

course, the sceregvl.inf should be in the right place.

and I still couldn't see the settings in "Security Options". I

also tried to copy sceregvl.inf to directory \Windows\inf, it still

didn't work. I rebooted machine and didn't work, either. I

didn't try to rebuild the image with an extra file sceregvl.inf

included in directory %17% because I guess it will be the same

thing.

the only thing I need to do is to load the settings into

security database file \Windows\security\database\secedit.sdb. But

how to do that? Does anyone know it?need to either use your own custom component or TD Extra Files

option.

I'm able to see "Local Security Policy" in Control Panel.

And when

Security Settings". If I check "Local Policies\Security Options", I

can see

example, I can see security options about network in "Security

Options" as

we have made some programs which based on those network

security

component with the "Local Security Policy" name. You are

looking for

components needed for this function. So that I don't have to