AD auditing and registry

  • Thread starter Thread starter Arne
  • Start date Start date
A

Arne

Does anyone know which registry keys correspond with the following:
Settings for CN=Schema,CN=Configuration,DC=ForestRootDomain -
Modify Permissions
Modify Owner
Create All Child Objects
Delete
Delete All Child Objects
Delete Subtree
Write All Properties
Change Schema Master
All Extended Rights

Our security checking tool will not check schema auditing but it can be
customized to check registry keys.

Thanks
 
If I understand the question, the answer is that there are no such reg keys.
Those are bits in the security descriptor of the named AD object, stored
in the AD database.
 
Back
Top