thanks darren. so if i'm understanding correctly: - the local security policy is a subset of the security section of the local gpo - the local security policy is stored in a database, not a gpo file? where is the db stored exactly? - settings defined in the local security policy can't be viewed/exported using gpmc? only using secedit? daniel. On 16/01/2009, Darren Mar-Elia <darren@xxxxxxxxxx> wrote: > > Daniel- > > If you are talking about the Local Security Policy shortcut that you see in > Administrative Tools, then that is simply an MMC snap-in tool focused on the > security portion of the local GPO. So you are essentially looking at a > subset of the Local GPO. That being said, security policy on the local GPO > is made against the live system, instead of being stored in settings files > like it is for other local GPO settings. That makes it somewhat special and > often troublesome to manage. > > > > Darren > > > > *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On > Behalf Of *daniel > *Sent:* Thursday, January 15, 2009 7:02 PM > *To:* gptalk@xxxxxxxxxxxxx > *Subject:* [gptalk] local security policy & local group policy > > > > hi all, > > > > simple question. > > > > what is the difference between the local security policy and the local > group policy? > > > > daniel. >