RE: security policy 'not specified' option

If the settings conflict, the domain policy will overwrite the local
policy settings.  If you have made weird policy changes on a workstation
that you want to undo, you can use the Security Configuration and
Analysis tool to re-establish the original security settings.  I don't
think it will reset NTFS permissions though...

        Tyson.

-----Original Message-----
From: matthew patton [mailto:pattonme@yahoo.com] 
Sent: Thursday, October 20, 2005 2:57 PM
To: focus-ms@securityfocus.com
Subject: security policy 'not specified' option

Some time back I used a security policy editor that had 3 options:
enabled, disabled, and 'unset'. By not setting it either way, the
machine inherited the domain settings. Unfortunately the standard system
policy editors shipped with 2K/2K3/XP don't appear to have that 3rd
option which means now I've got all kinds of machine running with who
knows what setting and ignoring the domain policy. And once you've
selected en/disabled via the radio box, there isn't a way to unset it.
How do I dig myself out of this?

I probably can play Registry Magic and accomplish what I need but I
could have sworn I had a tool that would let me do what I used to be
able to do.

any ideas?

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
---------------------------------------------------------------------------