组策略secedit命令

导入：
secedit /configure /db temp.sdb /cfg d:\setup.inf

导出

secedit /export /cfg d:\setup.inf

 
echo [Event Audit] >>sec.inf (以下可以跟据SYSLOG 收集日志来自定义设置)
echo AuditSystemEvents = 3 >>sec.inf 审核系事件(成功、失败)
echo AuditLogonEvents = 3 >>sec.inf 审核登陆事件(成功、失败)
echo AuditObjectAccess = 0 >>sec.inf 审核对象访问
echo AuditPrivilegeUse = 3 >>sec.inf 审核过程跟踪(成功、失败)
echo AuditPolicyChange = 3 >>sec.inf 审核策略更改 (成功、失败)
echo AuditAccountManage = 3 >>sec.inf 审核帐号管理 (成功、失败)
echo AuditProcessTracking = 0 >>sec.inf 审核目录服务访问
echo AuditDSAccess = 0 >>sec.inf 审核特权使用
echo AuditAccountLogon = 3 >>sec.inf 审核帐号登陆事件(成功、失败)

linux安全运维命令 IE设置对应注册表位置