Local Security Policy

[Gordon Smith (eMVP)]

Look for the component that contains secpol.msc.

--Gordon Smith (eMVP)

Bin Xing wrote:
> Hi,
>
> Is there anyone knows how to show "Local Security Policy" in Control
> Panel?
>
> What are the components for it?
>
> When can I find the list of components? For example: If I want to
> know the components of "Local Security Policy", I just type string
> "Local Security Policy" and get the list of the components needed for
> this function. So that I don't have to post more questions about the
> components for each function.
>
> Thanks in advance.
>
> Bin

[KM]

Bin Xing,

This is just a XP/XPe terminology problem. There is no component with the "Local Security Policy" name. You are looking for
"Security Settings Editor" component.

--
KM,
BSquare Corporation

[KM]

Bin Xing,

I am not sure if it is a bug or expected behavior.
Try including sceregvl.inf file into your image under %17% directory or just "install" the inf file at run time. There is,
unfortunately, no component that owns the file so you will need to either use your own custom component or TD Extra Files option.
I have not tried the sceregvl.inf at runtime but I am pretty sure it has many XP security policies in it.

--
KM,
BSquare Corporation

> Hi KM & Gordon Smith,
>
> Thank you so much for your reply.
>
> I have one more question about the security policy. Right now, I'm able to see "Local Security Policy" in Control Panel. And when
I double click it, I can see popup window called "Local Security Settings". If I check "Local Policies\Security Options", I can see
some settings in "Security Options". However, compared with Windows XP Professional, Windows XP Embedded has less settings in
"Security Options", maybe I missed some components. For example, I can see security options about network in "Security Options" as
below:
>
> -- Network Access: Allow anonymous SID/Name translation
> -- Network Security: Force logoff when logon hours expire
>
> But I can't see the following settings, which I can see in Windows XP Professional:
>
> -- Network Access: let Everyone permissions apply to anonymous users
> -- Network Access: Name Pipes that can be accessed anonymously
> -- Network Access: Remotely accessible registry paths
> -- Network Access: shares that can be accessed anonymously
> -- Network Access: sharing and security model for local accounts
>
> I really need the network security on Windows XP Embedded because we have made some programs which based on those network security
settings.
>
> Is there any component I missed, or some settings I didn't do?
>
> Thanks.
>
> Bin
>
> ----- KM wrote: -----

[KM]

Bin Xing,

scecli.dll is responsible for loading up the security policy settings from the sceregvl.inf.

So,
1. Make sure "Windows Security Configuration Editor Client Engine" is included in to your image. If you also add sceregvl.inf to
your image, there is an FBA registration command for scecli.dll library in the component resources. The scecli.dll will pick up the
sceregvl.inf automatically.

or

2. At run time, register the scecli.dll file (found in the %SystemRoot%\System32 directory) by executing regsvr32 scecli.dll. Of
course, the sceregvl.inf should be in the right place.

--
KM,
BSquare Corporation

> Hi KM,
>
> I tried to install sceregvl.inf at run time, but it didn't work and I still couldn't see the settings in "Security Options". I
also tried to copy sceregvl.inf to directory \Windows\inf, it still didn't work. I rebooted machine and didn't work, either. I
didn't try to rebuild the image with an extra file sceregvl.inf included in directory %17% because I guess it will be the same
thing.
>
> But I do find all of the settings I need in sceregvl.inf. I guess the only thing I need to do is to load the settings into
security database file \Windows\security\database\secedit.sdb. But how to do that? Does anyone know it?
>
> Thanks KM.

[Doug Hoeffel]

Bin:

Search google groups for "sceregvl.inf Fincher". Jon Fincher [MS] solved
this for me a while back. He documented how to make the component for the
orphaned file sceregvl.inf.

HTH... Doug

"Bin Xing" <anon...@discussions.microsoft.com> wrote in message
news:FF01BC4D-1ED9-4081...@microsoft.com...
> Hi KM,
>
> Thank you so much. I'll try it later, but I guess it's going to work.
>
> And I also found something similar as what you mentioned from Microsoft
web site. Here is the link just in case someone else who is interested in
it.
>
>
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/xpehelp/html/xetbscreatingcomponentforcustomsecuritytemplate.asp
>
> Thanks for both of you and have a good weekend. :-)