Error 1208 And Secedit
1208. PLEASE HELP Moderator: DosItHelp Post new topic Reply to topic Page 1 of 1 [ 10 posts ] Print view Previous topic | Next topic Author Message Rahl42 Post subject: Secedit extended error 1208. PLEASE HELPPostPosted: 01 Dec 2012 19:35 Offline Joined: 01 Dec 2012 19:32 Posts: 5 Alright so I am trying to make a batch file using secedit so that I can activate it and it will automatically set the group policy defined in the text files being used. An example of one of them (I exported them all the same way, I get the same error for all of them, so one should be fine) is this:Policy Security SettingAccount lockout duration 30 minutesAccount lockout threshold 10 invalid logon attemptsReset account lockout counter after 30 minutesI saved that as a .txt after exporting it from a machine I had just configured. Then, in my batch file, I used the following code to try to apply it:secedit /configure /db "Account Lockout Policy.txt" /log "change log"And in the "change log" file, I get the following output:-------------------------------------------Friday, November 30, 2012 %:28:20 PMError 1208: An extended error has occurred.Error opening C:\Users\
? Ask a question, help others, and get answers from the community Discussions Start a thread and discuss today's topics with top experts Blogs Read the latest tech blogs written by experienced community members Applying a group policy security template with secedit Astibich 10 pts. Tags: Thanks! We'll email youwhen relevant content isadded and updated. Following Follow Group Policy Thanks! We'll email youwhen relevant content isadded and updated. Following Follow Microsoft Management Console Thanks! We'll email youwhen relevant content isadded and updated. Following Follow MMC Thanks! We'll email youwhen relevant content isadded and updated. Following Follow Security Thanks to Darren Mar-Elia, I was able http://www.dostips.com/forum/viewtopic.php?t=4023 to figure out how to create a security template for my computer's group policy settings with the MMC. It's a pretty simple template, only three items: Unicode] Unicode=yes [Version] signature="$CHICAGO$" Revision=1 [System Access] EnableGuestAccount = 1 [Registry Values] MACHINESystemCurrentControlSetControlLsaEveryoneIncludesAnonymous=4,1 [Privilege Rights] SeDenyNetworkLogonRight = I would like to apply the template from the command line, so I run secedit as follows: secedit /configure /db ".VREnterpriseSetup.inf" This errors out. I http://itknowledgeexchange.techtarget.com/itanswers/applying-a-group-policy-security-template-with-secedit/ get an ambiguous error in the log file: Friday, January 18, 2008 9:42:14 AM Error 1208: An extended error has occurred. Error opening C:Documents and SettingsastibichDesktopDCOM SetupVREnterpriseSetup.inf. ----Configuration engine was initialized with one or more errors.---- ----Un-initialize configuration engine... I've tried many variations on the command line: adding '/areas', trying to use '/cfg' (not sure yet what that does). I feel like I'm missing something obvious here... Aaron Asked: January 18, 20086:09 PM Last updated: January 18, 20087:16 PM Related Questions Outlook GPO Setting: Customizable Error Messages Unicode error SQL To Excel Data Dumping with the help of SSIS flow task. Problem with GPO's and Active Directory Gridview data in ASP.NET data table Answer Wiki Thanks. We'll let you know when a new response is added. Please enter an answer. Send me notifications when members answer or reply to this question. Register Hereor login if you are already a member E-mail User Name Password Forgot Password? By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy Answer Answer Processing your response... Discuss This Question: &
Join INTELLIGENT WORK FORUMSFOR COMPUTER PROFESSIONALS Log In Come Join Us! Are you aComputer / IT professional?Join http://www.tek-tips.com/viewthread.cfm?qid=1530306 Tek-Tips Forums! Talk With Other Members Be Notified Of ResponsesTo http://www.lockergnome.com/windows/2005/02/04/corrupt-group-policy-database-file/ Your Posts Keyword Search One-Click Access To YourFavorite Forums Automated SignaturesOn Your Posts Best Of All, It's Free! Join Us! *Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail. Posting Guidelines Promoting, selling, recruiting, error 1208 coursework and thesis posting is forbidden.Tek-Tips Posting Policies Jobs Jobs from Indeed What: Where: jobs by Link To This Forum! Add Stickiness To Your Site By Linking To This Professionally Managed Technical Forum.Just copy and paste the BBCode HTML Markdown MediaWiki reStructuredText code below into your site. Microsoft: Windows Server error 1208 and 2003 Forum at Tek-Tips HomeForumsMIS/ITOperating Systems - Hardware IndependentMicrosoft: Windows Server 2003 Forum secedit.sdb database?!! thread931-1530306 Forum Search FAQs Links MVPs secedit.sdb database?!! secedit.sdb database?!! TheMisio (TechnicalUser) (OP) 12 Feb 09 05:22 Hi All,Does anyone know if corrupted secedit.sdb database on Windows XP SP3 can impact on a logon speed?I have noticed that on many of our laptops, logon (especially applying personal settings) takes very long time. On all affected machines there was an error in the log stating an extended error applying a security policy.I have fixed the database using esentutl and noticed that the logon process is faster.Does anyone know why?I need to know this before recommending a fix on over a thousand laptops (all built on the same syspreped image).Regards,Michael RE: secedit.sdb database?!! TheLad (TechnicalUser) 12 Feb 09 07:32 Can you post the exact error? --------------------------------------"Insert funny comment in here!"-------------------------------------- RE: secedit.sdb database?!! Zelandakh (MIS) 12 Feb 09
log. The following events will be present if it is corrupt. Event Type: Error Event Source: Userenv Event Category: None Event ID: 1000 Date: 6/7/2000 Time: 2:56:53 PM User: WINDOWS NT AUTHORITY\SYSTEM Computer: ASKO-ONE Description: The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (1208). Event Type: Warning Event Source: SceCli Event Category: None Event ID: 1202 Date: 6/7/2000 Time: 2:56:53 PM User: N/A Computer: ASKO-ONE Description: Security policies are propagated with warning. 0x4b8 : An extended error has occurred. Please look for more details in Troubleshooting section in Security Help. Event Type: Error Event Source: ESENT Event Category: Logging/Recovery Event ID: 454 Date: 6/7/2000 Time: 2:56:53 PM User: N/A Computer: ASKO-ONE Description: services (PID) Database recovery/restore failed with unexpected error -530. Event Type: Error Event Source: ESENT Event Category: Logging/Recovery Event ID: 412 Date: 6/7/2000 Time: 2:56:53 PM User: N/A Computer: ASKO-ONE Description: services (PID) Unable to read the log header. Error -530. You can easily restore the database file to its original state using the steps outlined below: Open the %SystemRoot%\Security folder, create a new folder, and then name it "OldSecurity".
Move all of the files ending in .log from the %SystemRoot%\Security folder to the OldSecurity folder. Find the Secedit.sdb file in the %SystemRoot%\Security\Database folder, and then rename this file to "Secedit.old". Click Start, click Run, type mmc, and then click OK. Click Console, click Add/Remove Snap-in, and then add the Security and Configuration snap-in. Right-click Security and Configuration and Analysis, and then click Open Database. Browse to the %SystemRoot%\Security\Database folder, type Secedit.sdb in the File name box, and then click Open. When you are prompted to import a template, click Setup Security.inf, and then click Open. Post navigation EU ruling shuns open source, critics sayTools Of The Trade 2 thoughts on “Corrupt Group Policy Database File” Rodney Culver says: March 26, 2008 at 2:48 pm I get a access is denied. Import failed Make sure that you have the right permissions to this object. amin says: August 29, 2009 at 5:59 am i cant, when i want to import it, it says access is denied. Import Failed even when i'm in the s