Allows you to import a security template into a database so that the settings specified in the template can be applied to ...

Allows you to import a security template into a database so that the settings specified in the template can be applied to a system or analyzed against a system.

The syntax of this command is:

secedit /import  /db filename /cfg filename [/overwrite][/areas area1 area2...] [/log filename] [/quiet]

            /db filename - Specifies the database that the security template settings will be imported into.

            /cfg filename - Specifies a security template to import into the database. Security templates are created using the Security Templates snap-in.

            /overwrite - Specifies that the database should be emptied prior to importing the security template. If this parameter is not specified, the settings in the security template are accumulated into the database.  If this parameter is not specified and there are conflicting settings in the database and the template being imported, the template settings win.

            /areas - Specifies the security areas to export. If this parameter is not specified, all security settings defined in the database are exported. To export specific areas, separate each area by a space.  The following security areas are exported:

                        SECURITYPOLICY - Includes Account Policies, Audit Policies, Event Log Settings and Security Options.
                        GROUP_MGMT - Includes Restricted Group settings
                        USER_RIGHTS - Includes User Rights Assignment
                        REGKEYS - Includes Registry Permissions
                        FILESTORE - Includes File System permissions
                        SERVICES - Includes System Service settings

            /log filename - Specifies a file in which to log the status of the import process.  If not specified, import processing information is logged in the scesrv.log file which is located in the %%windir%%\security\logs directory.

            /quiet - Specifies that the import process should take place without prompting the user for any confirmation.

Example:

secedit /import /db hisecws.sdb /cfg hisecws.inf /overwrite

For all filenames, the current directory is used if no path is specified.