Secedit command: export in Windows

The secedit: export command allows you to export the security settings stored in the configured database with security templates.To better understand how to use this command, see the example below.

Syntax secedit command: export

 Secedit / export / db [/ mergedpolicy] / cfg [/ areas [securitypolicy | group_mgmt | user_rights | regkeys | filestore | services]] [/ log] [/ quiet] 

Parameter secedit command: export

Parameters

Describe

db

This is a required parameter.

Specify the path and name of the database file containing the stored configuration to conduct the analysis.

If the database designation name does not have a security template (as indicated by the configuration file) associated with it, the command line / cfg option must also be specified according to

mergedpolicy

Optional parameters.

Merging and exporting domain names as well as local security policy settings

cfg

This is a required parameter.

Specify the path and name for the security template to be entered into the database for analysis.

This optional parameter / cfg is only valid when used with the parameter / db.

If this parameter is not specified, the analysis will be performed for any configuration stored in the database.

areas

Optional parameters.

Specify security zones to be applied to the system.If this parameter is not specified, all security settings defined in the database will be applied to the system.To configure multiple security areas, separate each area with a space.The following security zones are supported:

- SecurityPolicy

Local policies and domain policies for the system, including account policies, audit policies, security options .

- Group_Mgmt

Group settings will be restricted to any group specified in the security form.

- User_Rights

User login and grant privileges.

- RegKeys

Security on local registry keys.

- FileStore

Secure local file storage.

- Services

Security for all identified services.

log

Optional parameters.

Specify the path and name of the log file to be used in the process.

quiet

Optional parameters.

Do not display the output on the screen.You can still view the analysis results by using the Security Configuration and Analysis attachment on Microsoft Management Console (MMC).

Note the secedit command: export

  1. You can use this command to back up your security policy on the local computer in addition to entering the settings to another computer.
  2. If the path for the log file is not provided, the default log file, (systemrootDocuments and Settings * UserAccountMy DocumentsSecurityLogs * DatabaseName.log) will be used.
  3. Starting withWindows Server 2008, the Secedit / refreshpolicy subcommand has been replaced with gpupdate.For more information on how to refresh security settings, see the Gpupdate command.

For example, secedit command: export

To export the security database and domain security policies to an inf file and then import this file to another database to copy the security policy settings on another computer, type:

 Secedit / export / db C: SecurityFY11SecDbContoso.sdb / mergedpolicy / cfg SecContoso.inf / log C: SecurityFY11SecAnalysisContosoFY11.log / quiet 

To import this file into a database on another computer, type:

 Secedit / import / db C: SecurityFY12SecDbContoso.sdb / cfg SecContoso.inf / log C: SecurityFY11SecAnalysisContosoFY12.log / quiet 

See more:

  1. Summary of 20 common Run commands on Windows operating system
  2. Overview of Windows Server 2008
  3. Instructions for installing Windows Server 2012 step by step
  4. Install Windows Server 2008
3.9 ★ | 60 Vote

May be interested

  • Sub-commands in nslookup Windows command (Part 3)Sub-commands in nslookup Windows command (Part 3)
    nslookup set recurse, nslookup set retry, nslookup set root, nslookup set search, nslookup set srchlist, nslookup set timeout, nslookup set type, nslookup set vc, and nslookup view in windows
  • Command at in WindowsCommand at in Windows
    the at command schedules commands and programs to run on a computer at a specified time with a specific date. you can only use the command at when schedule service is running.
  • Set command in WindowsSet command in Windows
    the set command helps show, set or remove cmd.exe environment variables.
  • Del command in WindowsDel command in Windows
    the del command deletes one or more files. this command is the same as the eraser command.
  • 10 useful commands in Windows you should know10 useful commands in Windows you should know
    command prompt is used to execute batch files, perform tasks quickly, help you troubleshoot and solve some windows problems when the system crashes. however, not all commands in windows are useful and must be done regularly. with the 10 command lines in the following article it is very useful even if you are not an administrator.
  • How to export Hyper-V virtual machines in Windows 10How to export Hyper-V virtual machines in Windows 10
    you can use hyper-v export and import functions to quickly copy virtual machines. virtual machines that are accessed can be used for backup or as a way to migrate a virtual machine between hyper-v servers.
  • How to use the option equivalent to the 'ls' command in WindowsHow to use the option equivalent to the 'ls' command in Windows
    the 'ls' command (note ls, not is) is one of the first terminal commands veterans teach to linux beginners.
  • The command reg add in WindowsThe command reg add in Windows
    the reg add command adds new subkeys or entries to the registry.
  • Rem command in WindowsRem command in Windows
    the rem command helps write comments (comments) in a batch file or config.sys.
  • Instructions for using Command PromptInstructions for using Command Prompt
    deep in windows is a command-line world that is obscure. in this article, we will show you how to solve errors and make your computer more secure.