Bin Xing,
scecli.dll is responsible for loading up the security policy settings from the sceregvl.inf.
So,
1. Make sure "Windows Security Configuration Editor Client Engine" is included in to your image. If you also add sceregvl.inf to
your image, there is an FBA registration command for scecli.dll library in the component resources. The scecli.dll will pick up the
sceregvl.inf automatically.
or
2. At run time, register the scecli.dll file (found in the %SystemRoot%\System32 directory) by executing regsvr32 scecli.dll. Of
course, the sceregvl.inf should be in the right place.
--
KM,
BSquare Corporation
> Hi KM,
> I tried to install sceregvl.inf at run time, but it didn't work and I still couldn't see the settings in "Security Options". I
also tried to copy sceregvl.inf to directory \Windows\inf, it still didn't work. I rebooted machine and didn't work, either. I
didn't try to rebuild the image with an extra file sceregvl.inf included in directory %17% because I guess it will be the same
thing.
> But I do find all of the settings I need in sceregvl.inf. I guess the only thing I need to do is to load the settings into
security database file \Windows\security\database\secedit.sdb. But how to do that? Does anyone know it?
> Thanks KM.
> Bin
> ----- KM wrote: -----
> Bin Xing,
> I am not sure if it is a bug or expected behavior.
> Try including sceregvl.inf file into your image under %17% directory or just "install" the inf file at run time. There is,
> unfortunately, no component that owns the file so you will need to either use your own custom component or TD Extra Files
option.
> I have not tried the sceregvl.inf at runtime but I am pretty sure it has many XP security policies in it.
> --
> KM,
> BSquare Corporation
> > Hi KM & Gordon Smith,
> >> Thank you so much for your reply.
> >> I have one more question about the security policy. Right now, I'm able to see "Local Security Policy" in Control Panel.
And when
> I double click it, I can see popup window called "Local Security Settings". If I check "Local Policies\Security Options", I
can see
> some settings in "Security Options". However, compared with Windows XP Professional, Windows XP Embedded has less settings in
> "Security Options", maybe I missed some components. For example, I can see security options about network in "Security
Options" as
> below:
> >> -- Network Access: Allow anonymous SID/Name translation
> > -- Network Security: Force logoff when logon hours expire
> >> But I can't see the following settings, which I can see in Windows XP Professional:
> >> -- Network Access: let Everyone permissions apply to anonymous users
> > -- Network Access: Name Pipes that can be accessed anonymously
> > -- Network Access: Remotely accessible registry paths
> > -- Network Access: shares that can be accessed anonymously
> > -- Network Access: sharing and security model for local accounts
> >> I really need the network security on Windows XP Embedded because we have made some programs which based on those network
security
> settings.
> >> Is there any component I missed, or some settings I didn't do?
> >> Thanks.
> >> Bin
> >> ----- KM wrote: -----
> >> Bin Xing,
> >> This is just a XP/XPe terminology problem. There is no component with the "Local Security Policy" name. You are
looking for
> > "Security Settings Editor" component.
> >> --
> > KM,
> > BSquare Corporation
> >>> Hi,
> >>> Is there anyone knows how to show "Local Security Policy" in Control Panel?
> >>> What are the components for it?
> >>> When can I find the list of components? For example: If I want to know the components of "Local Security Policy", I just
> type
> > string "Local Security Policy" and get the list of the components needed for this function. So that I don't have to
post more
> > questions about the components for each function.
> >>> Thanks in advance.
> >>> Bin