I'm building a win2k advanced server lockdown script and i noticed the NTFS permissions are not taking on the system i applied the script to. I'm using secedit.exe to apply it:

secedit /configure /overwrite /db "%drive%\results\%computername%\%computername%.sdb " /cfg "%drive%\W2K_MMBERSRV.inf" /log "%drive%\%computername%\results\sec.log"


it's either i get this working or i have to buy a supercacls license (trustedsystems.com) which is going to cost us an arm and a leg.

I basically need to configure auditing and ntfs permissions on a bunch of directories to eliminate a manual process that people i work with have been using.

 

i've only done it with the straight .inf replacement that just blows out the old settings and replaces with new ones....not as granular as you are going with it....my luck with registry editing as of late is not so good