Check Group Policy: Computer Configuration \ Windows Settings \ Security
Settings \ System Services
Remote Registry can be set to Automatic, Manual, or Disabled.
"Kelly, Jim" <Jim_Kelly@sra.com>
Sent by: nessus-bounces@list.nessus.org
01/11/2008 06:33 AM
To
<nessus@list.nessus.org>
cc
Subject
Remote Registry Service
Thanks to all who answered my mhtml question of yesterday. I solved the
problem by getting the xml files for the scans, importing them into Nessus
for Windows and viewing them there.
One problem I keep stubbing my toe on is Remote Registry.
As all of you are already aware, Nessus needs remote access to the target
registry to determine if various Hotfixes and patches have been applied.
Now many secured environments have decided to turn off the Remote Registry
service. The new OMB mandated FDCC ?approved? desktop image for Federal
desktops has Remote Registry turned off by default.
My question is how can Remote Registry be temporarily turned on for
scanning purposes? Can an AD GP be used for this purpose?
I?ve searched the Microsoft site and found
http://support.microsoft.com/kb/314837
The solutions mentioned therein don?t appear to be practical for my
purposes.
Any help would be appreciated.
---------------------------------------------------------
James Kelly
Senior Information Assurance Engineer
SRA International, Inc.
(703)284-8266
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
