I don't know what the default is, but maybe a script that just removes
all users from a file, and sets the permissions for "everyone" to be
This question is old, but I wanted to add an answer for those interested in resetting their security settings.
For 2000/XP/2003, you can use the default Security template method.
After security settings are applied, you cannot undo the changes without restoring from a backup. If you are uncertain about how to restore your security settings to the default settings, you must make a complete backup that includes the System State (the registry files).
Items that are reset include NTFS file system files and folders, the registry, policies, services, permissions, and group membership.
To restore your operating system to the original installation default security settings, follow these steps:
- Click Start, click Run, type cmd, and then press ENTER.
In Windows XP, type the following command, and then press ENTER:
secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose
In Windows Vista, type the following command, and then press ENTER:
secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb
You receive a "Task is completed" message and a warning
message that something could not be done. You can safely ignore this
message. For more information about this message, see the
For Vista and up, Microsoft basically says you are SOL
There basically is no way to restore all your security settings back to default. You can get most of them back, however by using the old method.
Just as warning: Just note that it is unsupported and may unknowingly break your system. I guess that isn't an issue if it is already broken. I have and tested it and it is not for the faint at heart.
- If you choose to continue, follow the steps above.
- Next, you'll need to add all your user created User Accounts back into the User group.
Open an elevated command prompt
a. Hit the Win to bring up the Start Menu
b. Type in cmd followed by CTRL Shift Enter.
c. You'll know it is an elevated prompt because the Title bar says: Administrator.
type in net user to bring up a list of user accounts.
- type in net localgroup users accountname /add, replacing accountname.