Allows you to generate a rollback template with respect to a configuration template. The syntax of this command is: secedit ...

Allows you to generate a rollback template with respect to a configuration template.

The syntax of this command is:

secedit /generaterollback /cfg filename /rbk filename [/log filename] [/quiet]

            /db filename - Specifies the database used to perform the rollback.

            /cfg filename - Specifies a security template with respect to which a rollback template is generated. Security templates are created using the Security Templates snap-in.

            /rbk filename - Specifies a security template into which the rollback information is written. Security templates are created using the Security Templates snap-in.

            /log filename - Specifies a file in which to log the status of the rollback process.  If not specified, rollback processing information is logged in the scesrv.log file which is located in the %%windir%%\security\logs directory.

            /quiet - Specifies that the rollback process should take place without prompting the user for any confirmation.

Example:

secedit /generaterollback /db hisecws.sdb /cfg hisecws.inf /rbk hisecwsrollback.inf /log hisecws.log

For all filenames, the current directory is used if no path is specified.