Home » Computers » Windows » Reset Windows Local “Group Policy Objects” Back To Defaults

Reset Windows Local “Group Policy Objects” Back To Defaults

This is from MS KB/Q: 313222. It should not change or reset the IPSec settings, but you might want back them up just in case.

Use the SECEDIT command to copy the original setting that are stored in the “defltbase.inf” file.

Vista/Win7:
secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose

WinXP:
secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose

The log file with the results of the reset can be found here:
%windir%\Security\Logs\Scesrv.log

Restart computer.

Other steps to reset MS policies

Clearing the IPSec settings and other Microsoft policy settings:
reg delete hklm\software\policies\microsoft /f
regedit /s ms_policies.regedit.reg
or
reg import ms_policies.reg

ms_policies.regedit.reg is the export file from REGEDIT of the “hklm\software\policies\microsoft” registry hive of a new, cleanly built computer.

ms_policies.reg is the file from REG EXPORT of the “hklm\software\policies\microsoft” registry hive of a new, cleanly built computer.

Delete the registry.pol file if it exists:
del %windir%\system32\grouppolicy\machine\registry.pol

Restart computer.


Leave a comment