secpol.msc cli options

[Pete]

Are there any options to assign and unassign Security
Policies from a command line? I am using this for a VPN
client with hopes of scripting a connect and dissconnect
script - trying to avoid using the gui.

Thanks,
Pete

 

[Roger Abell [MVP]]

Although it is not easy to use, and can be confusing,
look into the commandline utility in XP called
ipseccmd
Specific to your question is use of -x and -y in
static mode
Note that there are reports that IPsec policy should
be either managed entirely with the UI or else entirely
with the commandline utilities, as apparently there
can be some format/struct differences.
Also, not that this utility has been replaced by the
IPsec context of netsh in Windows 2003

 

[Roger Abell [MVP]]

Sorry Pete,
I read your post as being about IP Sec policy.
If you mean Group Policy, then no, that is not
scriptable, although if you build a security
template it can be applied with secedit command.
Roger