Using secedit windows xp

In Windows XP Professional, you may use the following secedit command-line to reset the file and registry permissions to defaults. Download and then install the Subinacl. SubInACL is a command-line tool that enables administrators to obtain security information about files, registry keys, etc. Open Notepad, copy the commands below and save the file as reset.

Double-click the file to run it. This script file may take a long time to run. Registry and file permissions in your system should be reset. Configures and analyzes system security by comparing your current configuration to specified security templates. Allows you to analyze current systems settings against baseline settings that are stored in a database.

The analysis results are stored in a separate area of the database and can be viewed in the Security Configuration and Analysis snap-in. Allows you to import a security template into a database so that the settings specified in the template can be applied to a system or analyzed against a system. Depending on which OS you are running, the command to refresh group policy is different. Also, there is a difference between refreshing a policy and forcing a policy refresh.

A default policy refresh will only download the settings that have changed. A forced refresh will re-apply all settings. To update Group Policy in Windows , you have to use the secedit command.

To refresh the computer policies, use this command:. Permissions on registry keys, on the other hand, were impossible to set by batch files, or so I thought. With the following technique you can set permissions on files, folders and registry keys, change ownership, set registry values, and more. The preparations require a lot of clicking in GUI screens, but after that you'll have a configuration file that can be used to "silently" set permissions using batch files.

So let's start with the preparations in the GUI. Select "Security Templates" and click " C lose". Select "File System" and right-click it; select "Add F ile Set the inheritance. Click "OK" to close the dialog.

Select "Registry" and right-click it; select "Add K ey Unless we want to grant "Authenticated Users" "Full Control", we need to use the "Ad v anced" settings.