Secedit



ͨǰһģȽϣúͷϵͳȫԡ


Ҫ鿴﷨뵥


secedit /analyze 


﷨



secedit /analyze /db FileName  [/cfg FileName] [/log FileName] [/quiet]






/db FileName
ġָаѴ洢õݿ·ļݸִз FileName ָµݿ⣬ôָ /cfg FileName ѡ

/cfg FileName
ָݿзİȫģ·ļֻеʹ /db ʱѡЧûָ˲Ѵ洢ݿеִз

/log FileName
ָù־ļ·ļṩòʹĬ־ļ

/quiet
ʹĻ־ļȻʹáȫúͷ鿴
 


secedit /configure 

ͨӦѴ洢ģ壬ϵͳȫԡ


﷨



secedit /configure /db FileName  [/cfg FileName ] [/overwrite][/areas area1 area2...] [/log FileName] [/quiet]






/db FileName
ġṩݿļݿӦʹõİȫģ塣

/cfg FileName
ָȫģļ˰ȫģ彫뵽ݿⲢӦϵͳֻеʹ /db ʱѡЧûָòӦѴ洢ݿеģ塣

/overwrite
ָ /cfg еİȫģǷӦøǴ洢ݿеκģ򸴺ģ壬ǽӵ洢ģСֻеʹ /cfg ʱѡЧûָͻὫ /cfg еģ帽ӵ洢ģС

/areas area1 area2...
ָӦõϵͳеİȫûָӦõϵͳÿӦͨոָ




˵


SECURITYPOLICY
ϵͳıزԺԣʻԡ˲Եȵȡ


GROUP_MGMT
ڰȫģָκ


USER_RIGHTS
û¼Ȩ޺Ȩ


REGKEYS
עϵİȫ


FILESTORE
ļ洢İȫ


SERVICES
жķİȫ





/log FileName
ָ־ļļûָʹĬ·

/quiet
ʹĻ־ļ

 

secedit /export 


Ӱȫݿн洢ģ嵼ȫģļС


﷨



secedit /export [/mergedpolicy] [/DB FileName] [/CFG FileName] [/areas area1 area2...] [/log FileName] [/quiet]






/mergedpolicy
ϲͱز԰ȫԡ

/db FileName
ָģݿļûṩݿļƣʹϵͳݿ⡣

/db FileName
ָģļơ

/areas area1 area2...
ָģİȫûָ򶼽ÿӦͨոָ




˵


SECURITYPOLICY
ϵͳıزԺԣʻԡ˲Եȵȡ


GROUP_MGMT
ָڰȫģָκá


USER_RIGHTS
ָû¼Ȩ޺Ȩ


REGKEYS
ָעİȫ


FILESTORE
ָļ洢İȫ


SERVICES
ָжķİȫ




/log FileName
ָù־ļļûָʹĬ·

/quiet
ʹĻ־ļ
 


secedit /validate 


֤Ҫ뵽ݿϵͳӦóİȫģ﷨


﷨



secedit /validate FileName






FileName
ָʹðȫģ崴İȫģļ





ע

 secedit /refreshpolicy Ѿ gpupdate йˢ°ȫõϢ gpupdate

 XOX



