Logging the use of remote registry

Hi,
i have a "strange" request.. i need to log (and eventually block) the use of the remote registry on the client
i "trapped" the use of the rdp with a firewall rule, and i'm trying to do the same thing with the regedit (and the remote registry)
thanks for help, and forgive my bad english!
Sergio
0 Like
This discussion has been closed.
Comments
The registry can be audited just as the filesystem. Maybe a solution to the problem at hand?
Check this link.
I guess you should try Computer Management, block certain actions and use event viewer...