Re: GPO Systen Access (ex. MinimumPasswordAge)



Hi Jordan.

I know this option, but I would like get this information from the API or
registry (if possible) or similar. Because with secedit you get (export) the
security template but you don´t get the parameters applied in the machine.

For example.
You modify one parameter of the security policy and it requires reboot the
machine. If you export the template with secedit (before reboot), you get the
template with the parameter modified but you don´t get information about the
parameter applied in the machine. Do you understand me?.

Regards,
Ricardo.

"Jordan" wrote:

It is pretty easy in a domain and is mananged from the DC, however if you
are in a work group you can create the policy on one machine and merge it on
the others with secedit

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/secedit_cmds.mspx?mfr=true

"Ricar" <Ricar@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:20DDF8B5-9E23-46EC-851B-3D28C5D73073@xxxxxxxxxxxxxxxx
Hi all.
I need API information about this parameters (ex. MinimumPasswordLength,
PasswordComplexity, PasswordHistorySize, LockoutBadCount,
ResetLockoutCount,
LockoutDuration, etc.).
I would like programming a security tool which it sets and gets
information
about this part of the security setting of Windows systems. But I don´t
know
how to write or read this parameters in workgroup Windows machines.
This parameters does not store in the registry and I do not know how to
access to this.
Thanks a lot.
Ricardo.





.

.



Relevant Pages

  • Re: Starting another app with other user credentials
    ... windows credentials in registry in encrypted view is a very bad approach. ... This is a potential security hole. ... The user and password info will be stored encrypted in the registry. ... Note that this API ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Transferring local computer policy
    ... defining a security template, ... using the import capability of the Group Policy snapin ... > I had found the secedit command before. ... >>> consistent across all our learning center computers. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: converting to NTFS
    ... SECEDIT you have to first import the templates into a brand new security ... just apply the NTFS file permissions, it has the word "AREA" in it. ...
    (microsoft.public.win2000.security)
  • Re: Explorer / Desktop fails to run for User account login
    ... System State or registry. ... I ran a secedit to repair just the regkeys area; ... a power-plug reset. ... I kept a log of the secedit run, but frustratingly, it just lists the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: secedit API
    ... On post W2k systems the Resultant Set of Policy info is accessible ... I have never seen a public Api for directly delving into ... I am skeptical of the design of and config verification ware ... > secedit to set the security like privileges, ...
    (microsoft.public.security)