We help IT Professionals succeed at work.

Using secedit command to reset security settings - Windows 2003 Server

saunaG asked
Last Modified: 2013-12-04
I am using Win2003 Server Standard edtion and i am unable to make any changes to group policy objects.  I get an error 'Access denied' anytime i try to modify a group policy or edit the security settings on a GPO.

I am logged in as the administrator when i attempt this so I dont know what the problem is.

I did some looking and see that i can use the secedit command to reset the security settings back to default.  Also the secedit command allows me to specify to only reset the security settings on GPOs, and leave user rights, security policies and other stuff alone.

How do i use the secedit command to do this?  I am unsure of how to use the /DB and /CFG switches.  Apparently it is required but i do not have a file or security template to apply.  I am just resetting to default.

I was thinking something like
secedit /configure  <?? /db /cfg stuff here??> /areas GROUP_MGMP /log c:\myseceditlog.txt /verbose

I am not even 100% sure this will solve my problem.

My current security configuration on my Group Policy Object I am trying to modify but cannot looks like this:

Authenticated Users:  Read, Apply Group Policy
CREATOR OWNER: Special Permissions (Greyed out)
Domain Admins: Read, Write, Create Child Objects, Delete Child Objects, Special Permissions (Greyed out)
Enterprise Admins: Same as Domain admins
Enterprise Domain Controllers:  Read, Special Permissons (Greyed out)
System:  Same as Domain Admins

I notice nobody has Full Control permission.  Is this the problem that secedit will fix?

Watch Question

Pete LongTechnical Architect
Distinguished Expert 2019

Secedit is a windows 2000 command - in 2003 its gpupdate


i thought secedit was a command to reset security settings to the windows defaults while gpupdate is a command to 'force through' changes made to a group policy without rebooting
This one is on us!
(Get your first solution completely free - no credit card required)
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.