How to Reset All Local Security Policy Settings to Default in Windows
InformationLocal Security Policy (secpol.msc) is a Microsoft Management Console (MMC) snap-in with rules that administrators can configure on a computer or multiple devices for the purpose of protecting resources on a device or network. The Security Settings extension of the Local Group Policy Editor (gpedit.msc) snap-in allows you to define security configurations as part of a Group Policy Object (GPO).
This tutorial will show you how to quickly reset all Local Security Policy settings back to default in XP, Vista, Windows 7, Windows 8, and Windows 10.
You must be signed in as an administrator to be able to reset all Local Security Policy settings.
NoteThis will not reset Local Security Policy settings for a computer connected to a domain using Active Directory. The network administrator controls these settings instead.
Local Security Policy will only be available in:
- XP Professional
- Vista Business, Ultimate, and Enterprise editions.
- Windows 7 Professional, Ultimate, and Enterprise editions.
- Windows 8 Pro and Enterprise editions.
- Windows 10 Pro, Enterprise, and Education editions.
EXAMPLE: Local Security Policy settings
1. Open an elevated command prompt.
2. Enter the command below for your Windows, and press Enter. (see screenshot below)
(For Windows XP)
secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose
(For Vista, Windows 7, Windows 8, and Windows 10)
secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose
3. When finished, you can close the elevated command prompt if you like.
4. Restart the computer to fully apply.