secedit.sdb database?!!

[TheMisio]

Hi All,

Does anyone know if corrupted secedit.sdb database on Windows XP SP3 can impact on a logon speed?
I have noticed that on many of our laptops, logon (especially applying personal settings) takes very long time. On all affected machines there was an error in the log stating an extended error applying a security policy.

I have fixed the database using esentutl and noticed that the logon process is faster.

Does anyone know why?

I need to know this before recommending a fix on over a thousand laptops (all built on the same syspreped image).

Regards,

Michael

 

[TheLad]

Can you post the exact error?

--------------------------------------
"Insert funny comment in here!"
--------------------------------------

 

[Zelandakh]

including the event id and any other details from event log.

 

[TheMisio]

From event log:

Security policies were propagated with warning. 0x4b8 : An extended error has occurred.

From WInlogon.log:

11 February 2009 15:36:22
Administrative privileged user logged on.
Parsing template C:\WINDOWS\security\templates\policies\gpt00000.dom.
Error 1208: An extended error has occurred.
Error creating database.
----Configuration engine was initialized with one or more errors.----

Cheers,

 

[Titleist]

I've found with
"Security policies were propagated with warning. 0x4b8 : An extended error has occurred."
errors the quick and easy solution was to delete the secedit.sdb and all the templates in "C:\WINDOWS\security\templates\policies" and run a gpupdate /force command. After these steps no more "SceCLI" and UserEnv" errors.

John