Last Updated on February 23, 2026
Modern Windows versions allow you to adjust the local security settings for a particular computer. If the computer was part of a domain on a network then these settings would most likely be set at the domain group policy level on a domain controller. If you are not part of a domain or if you are a single computer user then you can adjust your security settings manually. These local changes directly affect the users of your specific computer.
To edit the standard security policy of a Windows computer you can use the Local Security Settings tool or the Group Policy Editor tool. The Local Security Settings tool will show you only items related to the security of that computer while the Group Policy Editor tool will show you additional items you can configure such as user and software settings.
Launching the Security Policy Tool
1. Open the Start Menu
To open the Local Security Policy tool quickly in Windows 10 or Windows 11 you simply click on your Start button. You do not need to hunt through the legacy Administrative Tools folders anymore. The modern Windows search bar is the absolute fastest way to launch system utilities.
2. Run the Command
Type secpol.msc directly into the search box and press Enter. This specific command launches the Local Security Policy snap-in immediately. Another easy way to get to the full Group Policy Editor is to type gpedit.msc instead. Both commands require local administrator privileges to run successfully.
Understanding the Security Categories
1. Account Policies
You will see several sections related to different areas of the security policy on the left pane. Account Policies is where you can set password policies such as the minimum password length and how long before passwords expire. You can also setup account lockout policies which can lock out a user if they enter the wrong password too many times.
2. Local Policies
Local Policies is where you setup things such as auditing for logins, file access, policy changes and other types of events that can be logged. There is also a section for user rights assignments which allows you to fine tune what administrative tasks your users can perform. In the Security Options section you can grant or deny various rights such as the ability to rename the administrator account and restricting access to removable devices.
3. Public Key Policies
Public Key Policies is used to specify exactly how to manage digital certificates and certificate life cycles. This security setting specifies whether certificates are automatically enrolled by the system. It also controls if they are renewed when they are expired and removed when they are officially revoked.
4. Software Restriction Policies
The Software Restriction Policy section is used as a way to identify software and strictly control its ability to run on local computers. The two primary security levels available here are Disallowed and Unrestricted. This is an older method for preventing unauthorized applications from executing.
5. IP Security Policies (IPsec)
IP Security Policies is a framework for a set of protocols for security at the network layer of network communication. It is used to support the secure exchange of packets at the IP layer and is widely used in Virtual Private Networks. Windows has three built-in IPsec policies including Client, Secure Server, and Server.
6. Windows Defender Firewall
Newer versions of Windows will have additional areas that you can configure directly from this console. Windows Defender Firewall with Advanced Security is where you can set strict firewall settings to secure inbound and outbound network traffic. You can block specific applications from communicating with the internet here.
7. Network List Manager Policies
The Network List Manager Policies section oversees the identified and unidentified networks your computer connects to. You can use this to force specific network connections to always be treated as Public or Private. This directly affects how the Windows Firewall treats the traffic on that specific adapter.
8. Application Control Policies
Application Control Policies allows you to strictly control how users can access and use files. This section contains the modern AppLocker feature. AppLocker replaces the older Software Restriction Policies with much more granular rules based on file publishers and hashes.
9. Advanced Audit Policy Configuration
Advanced Audit Policy Configuration is where you can audit various granular events on your network or domain. You can track specific logons, logoffs, or exact object access. This generates incredibly detailed logs in the Windows Event Viewer for security analysis.
For additional training resources, check out our online IT training courses.
Check out our extensive IT book series.
