From: Dennis_S on
Had a situation where a workstation was not processing the default domain
policy when the user was logging on to the domain. Last username still
displayed when logging on, etc. Finally determined that
C:\WINDOWS\security\Database\SECEDIT.SDB must have been corrupt.

Through Security Configuration and Analysis, I created a new SECEDIT.SDB
database. When you do this you are prompted to select a template. I chose
securews.inf. If this is just a cookie cutter XP installation, would this be
the correct default template to use in this situation?

I seemed to have resolved the problem, but noticed in the
C:\WINDOWS\security\logs\winlogon.log file that there were some Undo value
lines and Mismatch lines.

Thanks.


From: Shenan Stanley on
Dennis_S wrote:
> Had a situation where a workstation was not processing the default
> domain policy when the user was logging on to the domain. Last
> username still displayed when logging on, etc. Finally determined
> that C:\WINDOWS\security\Database\SECEDIT.SDB must have been
> corrupt.
>
> Through Security Configuration and Analysis, I created a new
> SECEDIT.SDB database. When you do this you are prompted to select
> a template. I chose securews.inf. If this is just a cookie cutter
> XP installation, would this be the correct default template to use
> in this situation?
>
> I seemed to have resolved the problem, but noticed in the
> C:\WINDOWS\security\logs\winlogon.log file that there were some
> Undo value lines and Mismatch lines.

A Google search:
http://www.google.com/search?q=what+is+securews.inf+%22Windows+XP%22

Would take you to:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_scedefaultpols.mspx?mfr=true

From there you can see that the 'default XP security template' is "Setup
security.inf". ;-)

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html


 | 
Pages: 1
Prev: User confusion
Next: Some sort of Email Spam virus