none
Issues running secedit on nano server RRS feed

  • Question

  • I was trying to see if I can set some local security policies (like password policy) using secedit on a nano server. I constructed a sample INF file (see below):

    [Unicode]
    Unicode=yes
    [System Access]
    MinimumPasswordAge = 2
    MaximumPasswordAge = 91
    MinimumPasswordLength = 7
    PasswordComplexity = 1
    PasswordHistorySize = 16

    [Version]
    signature="$CHICAGO$"
    Revision=1

    [Profile Description]
    Description=Test secedit on Nano Server

    When I try to apply them using secedit, I get following error:

    The specified module could not be found.

    Secedit log file includes following error information (though, I see the file c:\secEditTest1.inf exists, still gets this error):

    Thursday, October 29, 2015 7:26:38 AM
    Error 126: The specified module could not be found.
    Error opening C:\secEditTest1.inf.
    Error 15: The system cannot find the drive specified.
    ----Configuration engine was initialized with one or more errors.----
    ----Un-initialize configuration engine...

    This is the command I ran:

    secedit /configure /db C:\mytest.db /cfg C:\secEditTest1.inf /log C:\secEditTest1.log

    Does anyone knows if this is an issue in nano server in TP3?


    cheers..uc


    • Edited by ucthev Thursday, October 29, 2015 3:43 PM formatted
    Thursday, October 29, 2015 3:42 PM

Answers

  • Hi,

    Secedit doesn't work on Nano Server. We are working on a PowerShell based solution, which can be used with DSC to apply across multiple machines.

    Andrew

    • Marked as answer by ucthev Thursday, November 26, 2015 3:02 PM
    Wednesday, November 25, 2015 6:08 PM

All replies

  • Hi,

    Secedit doesn't work on Nano Server. We are working on a PowerShell based solution, which can be used with DSC to apply across multiple machines.

    Andrew

    • Marked as answer by ucthev Thursday, November 26, 2015 3:02 PM
    Wednesday, November 25, 2015 6:08 PM
  • that will be excellent! Thanks for this info Andrew.

    I noticed a DSC package in TP4 nano server.. just curious does it include any early implementation of security configuration/



    cheers..uc

    Thursday, November 26, 2015 3:01 PM
  • Hi,

    The DSC package in TP4 is the first drop of DSC on Nano Server so it is Push only in TP4. It unfortunately does not have an early implementation of the security configuration.

    Andrew

    Monday, November 30, 2015 4:15 PM
  • Andrew,

    With TP5 out, I am still figuring out how can I configure security on Nano server. I tried secedit and it still fails as it did in previous TPs.

    If I need to configure local security policy on nano server, how can I do that? Is there any DSC resource to do it? (sorry I didn't find any info on security config on nano so asking here again)

    TIA


    cheers..uc

    Wednesday, May 4, 2016 4:45 PM