The syntax of this command is:

secedit [/configure | /analyze | /import | /export | /validate | /generaterollback]

Allows you to analyze current systems settings against baseline settings that are stored in a database.  The analysis results are stored in a separate area of the database and can be viewed in the Security Configuration and Analysis snap-in.

The syntax of this command is:

secedit /analyze /db filename [/cfg filename ] [/overwrite] [/log filename] [/quiet]

            /db filename - Specifies the database used to perform the analysis.

            /cfg filename - Specifies a security template to import into the database prior to performing the analysis. Security templates are created using the Security Templates snap-in.

            /log filename - Specifies a file in which to log the status of the configuration process.  If not specified, configuration processing information is logged in the scesrv.log file which is located in the s%windir%\security\logs directory.

            /quiet - Specifies that the analysis process should take place without prompting the user for any confirmation.

Example:

secedit /analyze /db hisecws.sdb

For all filenames, the current directory is used if no path is specified.

c:\>ver
Microsoft Windows [Version 10.0.19045.2075]