Link to home
Start Free TrialLog in
Avatar of sqazi786
sqazi786

asked on

how to reset the local group policy editor default in windows 2003 server.


i have made some changes in local group policy editor.

I want all the changes to be resetted to default. How do i do that in group policy editor.

Thanks
Avatar of karel_jespers
karel_jespers

To configure local computer security
Using the Windows interface

Open Security Configuration and Analysis.
In the console tree, right-click Security Configuration and Analysis, and then click Open Database.
Where?

ConsoleRoot
Security Configuration and Analysis
In Open database, do one of the following:
To create a new database, in File name, type a file name, and then click Open.
To open an existing database, click a database, and then click Open.
If you are creating a new database, in Import Template, click a template, and then click Open.
In the console tree, right-click Security Configuration and Analysis, and then click Configure Computer Now.
Do one of the following:
To use the default log in Error log file path, click OK.
To specify a different log, in Error log file path, type a valid path and file name.
 Notes

To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
To open Security Configuration and Analysis, click Start, click Run, type mmc, and then click OK. On the File menu, click Open, click the console that you want to open, and then click Open. In the console tree, click Security Configuration and Analysis.
To check the log file, right-click Security Configuration and Analysis, and then click View Log File.
The default path for the log file is:
systemroot\Documents and Settings\UserAccount\My Documents\Security\Logs\

you must first the security configuration and analysis snapin to the mmc

first create a new database
after this the template that must be imported into the database must be selected
    the default templates start with the name basic, there are 3 of them depending on the role of your server
    dc , member server ...
select the analyze computer now
the system will be analyzed
the differences are marked   together with the database and actual setting
       
remark: for windows 2003 server the default templates are put in
============================================
dc security: default security settings updates for domain controllers  <====
setup security: out of box default security settings    <=====

not the basic* name templates as i said above
Avatar of Netman66
Delete the entries under User and Computer in \\SYSVOL\[domain]\Policies\GUID of policy

Avatar of sqazi786

ASKER

I need to restore the Local Policy editor to defualt template, not the Local Security Policy. Any suggestion on that.

ASKER CERTIFIED SOLUTION
Avatar of Netman66
Netman66
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
need to restore the Local Policy editor to defualt template, not the Local Security Policy:

local policy can be set to default using the Security Configuration and Analysis snapp-in tool that you can add to the mmc
it contains the audit policy settings, the user right assignment settings and the security options
don't let you confuse by that additional security word