Local Security Policy changes revert to default setting after reboot on Windows 11 Pro laptop

m.woolverton22 0 Reputation points
2023-03-14T13:47:00.3166667+00:00

I having an issue with a new Windows 11 Pro laptop. The laptop is to used in a stand-alone configuration (no internet connection) and I want to set the Local Security Policy settings for Audit Policy. I am using an Administrator account to make changes to the Audit policies. They appear to change on the screen, but when I reboot the laptop, the settings revert to the default setting (No Auditing) and did not save my setting changes. I have searched several forums on why this is occurring, but am at a loss. Maybe I am overlooking something simple, but any advise is appreciated. Thanks.

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,746 questions
{count} votes

1 answer

Sort by: Most helpful
  1. jsc.lt 46 Reputation points
    2023-03-19T16:21:17.54+00:00

    Interesting finding, but idk if its related. I get an error when I open:
    Local Group Policy Editor > Computer Configuration > Windows Settings > Security Settings > Local Policies.
    Perhaps the missing audit policies are related to the missing parameter:
    %windir%\security\database\secedit.sdb

    User's image

    My policies are still set, so I exported them to .admx to save.

    Next time I'm going to try fixes related to this error. Couple things to try.

    Troubleshoot 1:
    To repair the SECEDIT.SDB file open cmd>

    esentutl /p %windir%\security\database\secedit.sdb

    Troubleshoot 2:

    1. explore %windir%\security\database\secedit.sdb file.
    2. Rename it as secedit_old.sdb
    3. Open Command Prompt "CMD" and type "GPUPDATE /FORCE".
    4. Go to %windir%\security\database there will be new file created with name secedit.sdb.

    Troubleshoot 3:

    Reset the permission of sdb: cmd>

    secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose

    0 comments No comments