How can I import a security template in Windows 7 using command line?

I would like to remotely deploy some specific change in Security Policies to several computers via remote console (SSH). This is my just exported security template .inf file, extracted according (mostly) to these instructions :

[Unicode]
Unicode=yes
[Registry Values]
[Privilege Rights]
SeCreateTokenPrivilege = CRON
[Version]
signature="$CHICAGO$"
Revision=1
[Profile Description]
Description=PruebaCRON

It just adds the user "CRON" (homemade) to Local Security Policy snap-in to allow that user to 'Create a token object'.
When I try to import it in another computer (both Windows 7 SP1, 64 bits) doing this:

secedit /import /db secedit.sdb /cfg PruebaCRON.inf /overwrite /log MyLog.txt

... I get a warning message ("overwriting is dangerous, blah blah blah..."), I accept, and there is no error message, but nothing happens. There is no changes at all at secpol.msc.
The log file is a 2 bytes size, with no content (?).
Does anyone know how this command work, or any other method to import this simple change (just adding the user "CRON" to 'Create a token object') to Security Policies in Windows 7 via command line?

5

1 Answer

You can try method 1 from ibsk8in31's answer over at ServerFault:

TLDR:

secedit /configure /db c:\windows\security\local.sdb /cfg {.\path\to.inf}

Your Answer

Sign up or log in

Sign up using Google Sign up using Facebook Sign up using Email and Password

Post as a guest

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

You Might Also Like