Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Local Security Policy Editor - Open


Local Security Policy Editor - Open

How to Open Local Security Policy Editor in Windows
Published by Brink
18 Apr 2009
Published by

How to Open Local Security Policy Editor in Windows


information   Information
This tutorial will show you how to open the Local Security Policy Editor (secpol.msc) in Windows 7, Windows 8, and Windows 10.

Note   Note
The Local Security Policy settings are also among the security settings contained in the Local Group Policy Editor GPO.
  • You will need to be an administrator to open the Local Security Policy Editor.
  • In Windows 7, the Local Security Policy will only be available in the Professional, Ultimate, and Enterpise editions.
  • In Windows RT, 8, and 8.1, the Local Security Policy will only be available in the Pro and Enterprise editions.
  • In Window 10, the Local Security Policy will only be available in the Pro and Enterprise editions.

EXAMPLE: Local Security Policy
NOTE: The top screenshot is the separate Local Security Policy editor. The bottom screenshot is from within the Local Group Policy Editor.
-secpol-2.jpg

-group_policy.jpg



OPTION ONE
To Open Local Security Policy Editor Directly
1. Press the Windows + R keys to open the Run dialog, type secpol.msc, press Enter, and go to step 3 below.
NOTE: This file is located at C:\Windows\System32\secpol.msc.

OR

2. Open the Control Panel (icons view), and click/tap on the Administrative Tools icon.
A) Close the Control Panel window.

B) Double click/tap on Local Security Policy to open it, and go to step 3 below.
3. If prompted by UAC, click/tap on Yes.
NOTE: If you did step 2, then you can now close the Administrative Tools window if you like.

4. You can now set and manage the Local Security Policies on your computer to how you want them. (See screenshot below)
-secpol-2.jpg



OPTION TWO
To Open Local Security Policy Editor through Local Group Policy Editor
1. Open the Local Group Policy Editor.

2. Under Computer Configuration and User Configuration, click/tap on and expand Windows Settings to see the Security Settings. (See screenshot below)

3. You can now set and manage the Local Security Policies on your computer to how you want them. (See screenshot above)
-group_policy.jpg
That's it,
Shawn






25 Oct 2009   #1
justondean

Mac OS 10.6 Snow Leopard
 
 
Missing Security Policy Editor in Win7 (not RC or Beta)

I purchased an upgrade to windows 7 (after Beta testing it and using the RC).
I've got Win7 Home Premium (i'm cheap and it was only $30). I have it dual booted on a macbook just for games. I'm trying to connect to my Time Capsule disk but the Airport Base Station agent isn't working. I had this problem in the Beta and the RC but fixed it in the Security Policy Editor. I've been looking all morning for the Security Policy Editor and it isn't there. Microsoft just didn't put it in the OS. I tried going through the Group Policy stuff and I took a screenshot which I'll put on with this.

If anyone finds a way around this or a way to fix my problem without editing Security Policies please let me know.




Attached Thumbnails
-grouppolicynixed.png   -grouppolicynixed2.png  
My System SpecsSystem Spec
25 Oct 2009   #2
Brink
Microsoft MVP

64-bit Windows 10 build 10159
 
 

Hello Juston, and welcome to Seven Forums.

Sorry, but as in the Warning at the top of the tutorial.

Quote:
The Local Security Group Policy Editor will only be available in the Windows 7 Professional, Ultimate, and Enterpise editions. You will not have the Local Security Policy Editor available in the Windows 7 Starter and Home Premium editions.

I'm not sure how to resolve your issue, but you should repost this issue in the Network & Sharing forum to see if you may get a solution hopefully soon.
My System SpecsSystem Spec
30 Jan 2013   #3
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

How can i change the settings in win7 home premium? secpol.msc doesn't work... I know
For example I want to do this:

Hide some accounts using secpol.msc (then "Security Settings | Local Policies | User Rights Assignment | Deny log on locally"), but it is not available for Home Premium.

How to do it on home premium?
My System SpecsSystem Spec
.


30 Jan 2013   #4
Brink
Microsoft MVP

64-bit Windows 10 build 10159
 
 

Hello Ron,

You could use OPTION TWO in the tutorial below as a guide, but using SeDenyInteractiveLogonRight instead of SeShutdownPrivilege in the command to do so.

Shut Down Computer - Allow or Prevent Users and Groups
My System SpecsSystem Spec
30 Jan 2013   #5
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

Quote   Quote: Originally Posted by Brink View Post
Hello Ron,

You could use OPTION TWO in the tutorial below as a guide, but using SeDenyInteractiveLogonRight instead of SeShutdownPrivilege in the command to do so.

Shut Down Computer - Allow or Prevent Users and Groups
Local Users and Groups Manager - Open
See the warning..... not available on Home Premium! How do I do that in Home Premium?
My System SpecsSystem Spec
30 Jan 2013   #6
Brink
Microsoft MVP

64-bit Windows 10 build 10159
 
 

Using OPTION TWO with that command instead doesn't involve "Local Users and Groups" or "Local Security Policy", so you can do it in any edition of Windows 7. I did post the wrong link, but it's corrected now.

It's the same principle of changing a Group Policy manually in the registry instead. Just a different way of doing it.
My System SpecsSystem Spec
30 Jan 2013   #7
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Don't know if this is normal or not. But when I go to start menu type in secpol.msc and press enter I get this error message "
An attempt was made to reference a token that does not exist. " But if I type in secpol.msc and right click on the program and choose Run as Administrator it opens up. I have Windows 7 Ultimate and my user name is in the Administrators group.
My System SpecsSystem Spec
30 Jan 2013   #8
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

Quote   Quote: Originally Posted by Brink View Post
Hello Ron,

You could use OPTION TWO in the tutorial below as a guide, but using SeDenyInteractiveLogonRight instead of SeShutdownPrivilege in the command to do so.

Shut Down Computer - Allow or Prevent Users and Groups
So you mean using the ntrights.exe?

Code:
ntrights  -U  "User or Group"  +R  SeDenyInteractiveLogonRight
What's an Interactive Logon btw? Is it when you logon interactively on machine, or also using telenet and a Terminal Server logon?
My System SpecsSystem Spec
30 Jan 2013   #9
Brink
Microsoft MVP

64-bit Windows 10 build 10159
 
 

Correct. You would download and use the ntrights.exe file.

"SeDenyInteractiveLogonRight" is just the command it uses to "Deny log on locally".

http://support.microsoft.com/kb/315276
My System SpecsSystem Spec
Comment

 Local Security Policy Editor - Open




Tutorial Tools





Similar help and support threads
Windows 7 Tutorial Category
Local Group Policy Editor - Open
How to Open Local Group Policy Editor in Windows This tutorial will show you how to open the Local Group Policy Editor in Windows 7, Windows 8, and Windows 10. To search for a group policy or for it's registry key, value, and etc..., see: Group Policy Search and
Tutorials
local group policy editor
I have created three user accounts on my computer. Admin, Maint and operator...added the operator account to the group policy snap-in with very restricted policies. Problem is I have somehow associated the Admin and maint as well, how do I reset the local group policy back to default settings? I...
General Discussion
Unable to open Local Group Policy Editor (using Win 7 Pro)
I want to disable auto run and auto play of my disk drives for security. To do that, I need to access my Local Group Policy. However, while logged into my regular account, I am unable to access the Local Group Policy Editor via the gpedit.msc file. I get a "You don't have permission to...
System Security
Can't access Local Group Policy Editor
I want to disable the default reboot after Windows runs unattended updates as this often prevents my overnight backup from running. I have tried using the gpedit.msc routine to access the Local Computer Policy Editor but apparently that does not work in Win 7 Home Premium which I have. Is...
General Discussion
Can't find Local Group Policy editor
I have been trying to open the Local Group Policy editor as I need to check the "Lock pages in memory" option in order for a PS2 emulator to work. I can find the file when searching in my computer but when I open it it says it cannot create the MMC span-in. I have tried to add it to the MMC by...
Performance & Maintenance
Group Policy Editor or Local Security Policy
Will either of these allow me to restrict drive access to a single user only? I've tried to restrict drive access with Group Policy Editor but it applies the restriction globally--even to me the administrator. Could anyone let me know if this is possible and how to do it? Much thanks.
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 16:10.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App