Skip to content
Follow
Windows 🟡 Intermediate

How to Reset Local Security Policy Settings to Default in Windows 11

Richard
Written by
Richard
Jul 19, 2021 Updated Jul 22, 2026 5 min read
How to Reset Local Group Policy in Windows 11
How to Reset Local Group Policy in Windows 11

Resetting local security policy settings in Windows 11 restores them to their original factory state.

Local Security Policy settings on your PC revert to their original default states from when Windows 11 was first installed. This action ensures your computer's security configurations match the factory defaults.

You can access Local Security Policy settings using the Local Security Policy editor, a tool available in Windows 11 Pro, Enterprise, and Education editions. If you have made changes to your Local Security Policy settings and want to undo them, this guide shows you how to reset these Local Security Policy settings back to their default values.

⚡ Quick Answer

Open Command Prompt as administrator and run the commands RD /S /Q “📂%windir%\System32\GroupPolicyUsers”, RD /S /Q “📂%windir%\System32\GroupPolicy”, and gpupdate /force. Then, delete specific registry keys and restart your computer to complete the reset.

Step 1Open Windows Terminal as an Administrator

To reset group policy Windows 11, you first need to open Windows Terminal with administrator rights. This special window lets you give commands to Windows with full control. To do this, click the Start button , type ‘Windows Terminal’, and then right-click on the result.

Here’s how to open it:

  • Click the Start button or press the Windows key on your keyboard.
  • Type “Windows Terminal” in the search box.
  • When you see “Windows Terminal” in the results, don’t just click it. Instead, right-click on it.
  • From the menu that appears, choose “Run as administrator”.
  • You’ll see a message asking, “Do you want to allow this app to make changes to your device?” Click “Yes”.
💡Tip
Running a program as an administrator gives it permission to make important changes to your system that regular accounts can’t. This is necessary for changing security settings.

When Windows Terminal opens, it may display "PowerShell" at the top. This occurrence is acceptable. You will know the Windows Terminal is running as an administrator because the title bar will say "Administrator: Windows Terminal."

Step 2Enter the Command to Reset Security Policies

With the administrator window open, you can now enter the specific command to reset security policies. If your Windows Terminal defaults to PowerShell, type: secedit /configure /cfg $Env:WINDIR\inf\defltbase. This command resets your security settings to their default values.

You have two choices for the command, depending on whether you are using PowerShell or Command Prompt in Windows Terminal. Both accomplish the same task.

Option A: If Windows Terminal is set to PowerShell (this is the default):

💻Code
secedit /configure /cfg $Env:WINDIR\inf\defltbase.inf /db defltbase.sdb /verbose​

Option B: If you switched Windows Terminal to Command Prompt:

You can type or copy and paste one of the provided commands into the Windows Terminal window to reset Local Security Policy settings. Ensure the command you enter is exact to avoid errors during the reset process for your Windows 11 system.

  • Carefully type or paste the command into the blinking line in your Windows Terminal window.
  • Check for any mistakes!
  • Press the Enter key on your keyboard.

What the command does:

  • secedit: This is the tool used to manage security settings.
  • /configure: This tells secedit that you want to set up security.
  • /db %windir%\security\local.sdb: This tells the tool which file contains the default security settings. %windir% is a placeholder for your Windows folder (usually C:\Windows), and local.sdb is the file with the default settings.
  • /cfg %windir%\inf\defltbase.inf: This points to another file that helps set up security.
  • /quiet: This makes the command run without showing many messages.

An error in the command might prevent the command from working or lead to incorrect settings being applied. It is best to copy and paste the command directly from here.

You won't see elaborate graphics, but the command will execute. If it runs correctly, no error messages will appear. This process might take a few moments.

Step 3Close Windows Terminal

After the command to reset security policies finishes running, you can close the Windows Terminal window. Look for the 'X' button in the top-right corner and click it. Remember that your computer needs a restart for these changes to fully take effect.

  • Look for the "X" button in the top-right corner of the Windows Terminal window.
  • Click the "X" to close it.
💡Tip
Even after the command runs, the changes won't be fully active until you restart your computer.

Step 4Restart Your Computer

Restarting your computer is the final and most critical step to apply the reset group policy Windows 11 changes. Click the Start button, then the Power icon, and select 'Restart'. Make sure to save any open work first, as your computer will shut down and then turn back on.

  • Click the Start button.
  • Click the Power icon.
  • Choose "Restart".

Warning: Save any open work before restarting. Your computer will shut down and then power back on.

After your computer restarts, your Local Security Policy settings will be restored to their original defaults. This is an effective way to resolve issues caused by security setting modifications or to simply return to a known safe configuration.

Summary

To reset your Local Security Policy settings in Windows 11, start by opening Windows Terminal as an administrator. Next, run the command 'secedit /configure /cfg $Env:WINDIR\inf\defltbase' to reset the policies. Finally, restart your computer to make sure all changes are applied correctly.

How do I change my local Security Policy to default?

Open the Local Group Policy Editor. Navigate to the security policies located at Computer Configuration/Administrative Templates/All Settings and User Configuration/Administrative Templates/All Settings. Restore each setting to its default based on its documentation. Reboot your PC.

How do I reset all local policies?

Open Start. Search for Command Prompt, right-click the top result, and select the Run as administrator option. Type the following command to reset all the Group Policy settings and press Enter: RD /S /Q "%WinDir%\System32\GroupPolicyUsers" && RD /S /Q "%WinDir%\System32\GroupPolicy"

How to disable local Security Policy in 🪟 Windows 11?

You can enable/disable LSA using Group Policy as well. In Group Policy Management Editor go to Computer Configuration Administrative Templates System Local Security Authority

Was this guide helpful?

Tags: #Windows 11
Was this helpful?
Richard

About the Author

Richard

Tech Writer, IT Professional

Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.

📚 Related Tutorials

How to Access Command Prompt in Windows 11
Windows How to Access Command Prompt in Windows 11
How to View Local Group Policies that are Configured in Windows 11
Windows How to View Local Group Policies that are Configured in Windows 11
Windows 11 Control Panel Shortcuts Guide
Windows Windows 11 Control Panel Shortcuts Guide
How to Disable Command Prompt in Windows 11
Windows How to Disable Command Prompt in Windows 11

65 Comments

Leave a Comment

Your email address will not be published. Required fields are marked *