Ipsecpol.exe - Windows 2000 Resource Kit Utility

This command-line tool configures InterIPSecPol has two mutually exclusive modes: static and dynamic. The default mode is dynamic. Dynamic mode plumbs policy into the Policy Agent, which is active only for the lifetime of the Policy Agent service. This means it will not be active after a reboot or stopping of the service. The benefit of dynamic mode is that the policy can co-exist with directory service-based policies, which override any local policy not plumbed by IPSecPol