Advertisements
I’ve come across when a machine does not want to play well with the GPO (Group Policy Object) that are being pushed down to it. I did some research and it seems that “secedit.sdb” file will get corrupted. Correct me if I’m wrong, but the “secedit.sdb” is a Microsoft database that holds all security settings. So I created a short batch script to delete the file and do a GPupdate /force to push down the GPOs to the machine. Here is the code for the batch file:
REM KILL POLICY FILE ALLOW RENEWAL OF POLICY
REM SystemRoot=C:\WINDOWS
IF EXIST "%SystemRoot%\security\Database\secedit.sdb" DEL /Y "%SystemRoot%\security\Database\secedit.sdb"
GPUPDATE /Force
please make sure you run this script as an Administrator.