asked on

Local Security Policy Backup!

We randomly see the local security jet database files skip during backup jobs, due to the transactions occuring at the time. The questions I had about this is.

Is the local security policy necessary for a restore using the edb.log, Chk, Res files in the %systemroot%\security folder?

Is the local security policy included in the system state?

Will the local security policy restore itself back to previous state if you "delete" it

Please help, couldn't find anything on this as of yet

Thanks

ASKER CERTIFIED SOLUTION

Cyber-Dude

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

cdesimone

ASKER

Cyber,

Thanks for the info. I am pretty sure that this edb.log is the local security policy, because the three windows components that use the jet database are

Exchange
MSDS (AD)
Local Security Policy

The reason for this is because I am looking into the registry entries and found the storage location for NTDS on this machine is %SYSTEMROOT%\windows\system32\ntds

The directory that is skipping is %SYSTEMROOT%\security\edb.log etc.

This is the local securiy policy that is modified by GPO's from AD, but it does not contain AD in my opinion. Also, the size of these files are 1 Megabyte and less. I cannot really find much information on the files, however, but I do find that for some reason the local security policy is active and is processing transactions when it is skipped (thus the creation of the edb.tmp file, which is not present on most systems, but for some reason other servers that really don't have an explanation of why it would be skipped is skipping.. Thanks!