Security config and analysis tool rollback

[Mark]

Is there an easy way to roll back changes made with security configuration
and analysis tool? I know it uses the JET database engine to process and
log the changes, but I have not seen any information about how to roll back
or reverse changes. TIA.

Mark

 

[Spyke]

Hello Mark

In order to do this you would need to use the secedit command to generate a
rollback file that then could be used to do what you are asking.

This is from Win/XP but Win/2K3 has the same feature. I believe Win/2K3's
syntax is slightly different though.
secedit /GenerateRollback /CFG FileName.inf /RBK
SecurityTemplatefilename.inf [/log RollbackFileName.inf] [/quiet]



Cheers,

Richard

 

[Mark]

Spyke,

Thanks for the info. I did not know that this was added in W2K3/XP.
Unfortunatly, I am working with W2K and is seems that this is not an option.
I wonder if I can use the secedit.exe from W2K3 on W2K...? Thanks.

Mark

Hello Mark

In order to do this you would need to use the secedit command to generate a
rollback file that then could be used to do what you are asking.

This is from Win/XP but Win/2K3 has the same feature. I believe Win/2K3's
syntax is slightly different though.
secedit /GenerateRollback /CFG FileName.inf /RBK
SecurityTemplatefilename.inf [/log RollbackFileName.inf] [/quiet]



Cheers,

Richard

Is there an easy way to roll back changes made with security configuration
and analysis tool? I know it uses the JET database engine to process and
log the changes, but I have not seen any information about how to roll back
or reverse changes. TIA.

Mark

 

[Steven L Umbach]

Not after the fact unless you did as Richard posted ahead of time. You can use
secedit command to reset security to defined default settings as described in the KB
link below and you can also use secedit /export to create a template of most of your
security settings, just be sure to check the results of the template after the
export. The Group Policy Management Console can be used to manage Group/Security
policy. For W2K you would need to use a XP Pro domain machine. The GPMC is a
significant advancement in managing Group Policy. --- Steve

http://www.microsoft.com/windowsserver2003/gpmc/default.mspx
http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
http://www.microsoft.com/technet/tr...server2003/proddocs/standard/Secedit_cmds.asp

 

[Karl Levinson [x y] mvp]

You can reset the values back to the defaults that came with a fresh
install. This might be your best option if your machine is having serious
problems. See here:

http://securityadmin.info/faq.asp#grouppolicy