Logging the use of remote registry

Scholar

Logging the use of remote registry

Hi,

 

i have a "strange" request.. i need to log (and eventually block)  the use of the remote registry on the client

 

i "trapped" the use of the rdp with a firewall rule, and i'm trying to do the same thing with the regedit (and the remote registry)

 

thanks for help, and forgive my bad english!

 

Sergio

2 REPLIES 2
F-Secure Product Expert

Re: Logging the use of remote registry

 

The registry can be audited just as the filesystem. Maybe a solution to the problem at hand?


Check this link.

Best Regards,
Peter
Highlighted
Senior Advisor

Re: Logging the use of remote registry

I guess you should try Computer Management, block certain actions and use event viewer...