This is from MS KB/Q: 313222. It should not change or reset the IPSec settings, but you might want back them up just in case.
Use the SECEDIT command to copy the original setting that are stored in the “defltbase.inf” file.
secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose
secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose
The log file with the results of the reset can be found here:
Other steps to reset MS policies
Clearing the IPSec settings and other Microsoft policy settings:
reg delete hklm\software\policies\microsoft /f
regedit /s ms_policies.regedit.reg
reg import ms_policies.reg
ms_policies.regedit.reg is the export file from REGEDIT of the “hklm\software\policies\microsoft” registry hive of a new, cleanly built computer.
ms_policies.reg is the file from REG EXPORT of the “hklm\software\policies\microsoft” registry hive of a new, cleanly built computer.
Delete the registry.pol file if it exists: