Logging the use of remote registry

mrfusion

Hi,

 

i have a "strange" request.. i need to log (and eventually block)  the use of the remote registry on the client

 

i "trapped" the use of the rdp with a firewall rule, and i'm trying to do the same thing with the regedit (and the remote registry)

 

thanks for help, and forgive my bad english!

 

Sergio

Peter

 

The registry can be audited just as the filesystem. Maybe a solution to the problem at hand?

Check this link.

Janiashvili

I guess you should try Computer Management, block certain actions and use event viewer...