Setting the account policy and local security on a Windows Server Core system, you must first create a security template on a full Windows Server installation and subsequently apply these settings to the Windows Server Core system:
On the reference server (ie Windows Server full installation)
- From the Start menu, enter
secpol.msc
in the Start Search box and hit Enter to launch the Local Security Policy snap-in on another system. - Configure the security policies according to your needs, then right-click the Security Settings and click Export policy to save this as a security template.
On the Server Core server
- Copy the newly created security template from the reference server to the Server Core system.
- Run the below command to apply the security policy to the server Core system:
secedit /configure /cfg <Policy File Name> /db secedit.sdb