Hi Wayne,
Supposedly this capability is provided by
secedit /export
Use at cmd prompt "secedit /?" to get the help chm opened.
The doc also is in error for /export in the chm, as it lists the
/db switch twice, where it means to state /db and /cfg with
the second being for the output .inf
However, this capability seems to be broken.
Use of such as
secedit /export /cfg c:\temp\test.inf
with or without specifying the current system db
/db c:\windows\security\databases\secedit.sdb
results when I test with current XP in an empty .inf
Your question would be a great one to ask in the
microsoft.public.windows.group_policy newsgroup
to see if any MS person will follow-up.
(as matter of fact, I did just that yesterday, and have
drawn zero response)
As it is, all I know how to do is to manually define
a new template that matches the existing settings, which
is a major big initial pain, but one that, if maintained
is a significant gain.
--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
Wayne Gore said:
Hi
I would like to compare the settings of two different computers.
I thought that I could do that in "Security Configuration and Analysis" but I ran in to a problem.
I can only analyze templates (.inf-files) and I don't know how I can
produce a template from my current settings.
