A. The Security Configuration Editor, SECEDIT.EXE, is a new utility that forms part of Service Pack 4 however due to Microsoft's pledge not to provide new functionality with service packs previously the utility was only available on the service pack 4.0 CD. After public demand a web download version is available from ftp://ftp.microsoft.com/bussys/winnt/winnt-public/tools/SCM/SCESP4I.EXE.
Once downloaded you should execute the file and select an extraction directory.
Once the extraction is complete move to the extracted file directory and double click on MSSCE.EXE to install.
The installation installs two versions of SCE (Security Configuration Editor) a GUI and command line version. If you only wanted to install the command line tool enter the command
C:\> mssce /c /s
The /c means command line only, and the /s means silent install (no prompts).
The SCE is a Microsoft Management Console snap-in and so to use you must follow the steps below:
- Start MMC (mmc.exe)
- From the Console menu select "Add/Remove Snap-in"
- Click the Add button
- Select Security Configuration Manager and click OK
- Click OK to the main dialog
You may want to save this configuration
- Select Save As from the Console menu
- Enter a name of secedit and click Save
- It will be added to the "My Administrative Tools" program folder.
To edit a configuration expand the Configurations branch and the directory and select a configuration.
Setting the shutdown using the Security Configuration Editor
Once you have modified a configuration and saved it you need to activate it.
- Right click on database and select "Import Configuration"
- Select a security configuration file (a .inf file) and click open
- Right click again and select "Configure system now"
- Select a log file name and location.
- The policy will be applied to the system