It is the Windows Security Policies. See http://www.windowsnetworking.com/articles_tutorials/wxppspol.html for an explanation. The account and local policies are what I need to collect. I have yet to find out what APIs are available.
Comment on Re^2: Reading W2k3 Local Security Policy setting