Blog

How to reset local security policy settings to default

If you’ve ever found yourself with a computer that has remnants of a Group Policy still applied to it, or if you have changed GPO, and need to reset the local policy back to default, there’s a handy command you can use.

Open a command prompt (Start, Run, CMD) and enter:

secedit /configure /cfg %windir%repairsecsetup.inf /db secsetup.sdb /verbose                           for Windows XP

secedit /configure /cfg %windir%infdefltbase.inf /db defltbase.sdb /verbose                                 for Windows Vista/7

It will take a few minutes, and then you will need to reboot the computer to complete. This uses the default security configuration templates to reset the local policies.  Once rebooted, new policies or configuration can now be applied.