Messed sceregvl.inf

[Jason Grimme]

Hello,

I was trying to impliment the recommend changes from MS Threats and
Countermeasure, Chapter 10, and messed up a couple of the word wraps.

Now, when I look in GPEdit, there are a number of erroneous entries
under Windows Settings\Security Settings\Local Policies\Security
Options.

I've tried reverting back to the original sceregvl.inf, re-registering
scecli.dll, and performing a secedit /refreshpolicy machine_policy
/enforce (after deleteing secedit.sdb), but no luck.

Any ideas how I can get those *bad* entries from my GP interface? I
know they have no affect, but will cause confusion as I create support
documentation for me helpdesk.

tx!

-jg

 

[Darren Mar-Elia]

Jason-
Are these bad entries specific to a particular GPO or maybe the local GPO?

 

[Jason Grimme]

They show up in all the GPOs, or if I am running the "Security
Configuration Analysis" mmc snap-in, or editing Security Templates via
the MMC.

 

[Guest]

found it - I added an entry to the info file (jasongrimme)
so it would appear in the GP Edit, then searched the
registry for that string.

Found this entry (and all the other undesirables) under
HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\SeCEdit\Reg Values. Cleared them up,
and I am a happy boy again.

thx!
-jg