security templates are missing

[mike-ca]

Under XP Pro, there are several security templates( rootsec.inf,
hisecdc.inf, securews.inf, setup security.inf, and etc) in
C:\WINDOWS\security\templates folder, but in XP Embedded image I
created, only "setup security.inf" is there. Is this right? or any
settings in target designer will give me those additional templates?

Thanks!

 

[KM]

mike-ca,

This bug has been forever in XPe. Most of the security template INF files are not belonging to any component in the database.

You can add the files to your image manually (e.g., via TD Extra Files option) as they are all in XPe Repository except the "setup
security.inf".

 

[mike-ca]

Thanks KM for the suggestion, I found those files. One more question,
after my XPE is booted, i see all those setting in "local security
policy", if XPE are not using those security template files, what are
used to set up those settings?

Thanks!

 

[KM]

mike-ca,

Most of the settings are coming from defltwk.inf ("Windows Security Configuration Editor Client Engine" component).
However, I think not all of the local security settings of the missing files got to that INF.

Btw, you said you could find the "setup security.inf" file in your image. Are you sure it is there? Was it built along with your
image or did you copy it over from an XP Pro machine?

 

[mike-ca]

KM,

no, i didn't manually copy "setup security.inf" and it was there when i
created the final image. since it doesn't belong to any component, i
am not sure how it was included in the final image.

thanks

 

[KM]

Interesting.. Would you mind checking and posting here the size and datetime stamp of that file for me?
I am curious where it is coming from.

 

[mike-ca]

it seems created around the time i created my image which was 2 days
ago. however, unlike the one on XP Pro, this file is very small. here
it's entire content
---------------------------------------------------------------------------------------------------------------------------
[File Security]
0="C:\",0,"DA;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICIIO;GA;;;CO)(A;OICI;0x1200a9;;;BU)(A;CI;LC;;;BU)(A;CIIO;DC;;;BU)(A;;0x1200a9;;;WD)"
----------------------------------------------------------------------------------------------------------------------------

i did modify some local security settings, will the simple fact of
opening "secpol.msc" created it?

i did included some customized components in my project, but none has
this file. is there a way i can search through the .slx file to find
out if any component includes this file? i have already used filter,
but none shows up.

thanks

 

[KM]

mike-ca,

Sounds like you're referring to *post*-FBA image when you said the "setup security.inf" files was there.
If so, please disregard my question about it. I thought you somehow got the file in pre-FBA image which surprised me a lot as I
couldn't find it in any XPe repository.

The file was likely created automatically during the FBA when security engine component registration occurred.
It is small on your image because you didn't have all other original security templates there (all other INF files mentioned
earlier).

--
=========
Regards,
KM

it seems created around the time i created my image which was 2 days
ago. however, unlike the one on XP Pro, this file is very small. here
it's entire content
---------------------------------------------------------------------------------------------------------------------------
[File Security]
0="C:\",0,"DA;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICIIO;GA;;;CO)(A;OICI;0x1200a9;;;BU)(A;CI;LC;;;BU)(A;CIIO;DC;;;BU)(A;;0x1200a9;;;WD)"
----------------------------------------------------------------------------------------------------------------------------

i did modify some local security settings, will the simple fact of
opening "secpol.msc" created it?

i did included some customized components in my project, but none has
this file. is there a way i can search through the .slx file to find
out if any component includes this file? i have already used filter,
but none shows up.

thanks

Interesting.. Would you mind checking and posting here the size and datetime stamp of that file for me?
I am curious where it is coming from.