missing key/value in registry of w2k server - hot to track it?

missing key/value in registry of w2k server - hot to track it?
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
missing key/value in registry of w2k server - hot to track it? kono 06-12-2005
Posted by =?Utf-8?B?a29ubw==?= on June 12, 2005, 10:19 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
wi there,
Recently I have a problem that the key included the value in registry had
been deleted / missing but I can not find why or by who? My question is
perharps there is a way to zoom in why it could be happened and how to track
the causing of missing key/value in registry. Is there any tools to help it
out? Thanks for your help.....

Posted by Roger Abell [MVP] on June 13, 2005, 1:45 am
If you were  Registered and logged in, you could reply and use other advanced thread options
The main way to uncover such things is the event log if there was
auditing configured before the event occurred. After it is done and
the change has happened there is little trace that remains, but one
can always examine the system for unknown/suspect software.

--
Roger Abell
Microsoft MVP (Windows Server: Security)

> wi there,
> Recently I have a problem that the key included the value in registry had
> been deleted / missing but I can not find why or by who? My question is
> perharps there is a way to zoom in why it could be happened and how to
> track
> the causing of missing key/value in registry. Is there any tools to help
> it
> out? Thanks for your help.....



Similar ThreadsPosted
track user's operation to files or folder in windows 2003 server March 21, 2006, 12:40 am
802.1X supplicant & server authentication & registry November 17, 2005, 5:54 pm
cannot open remote registry when login with a domain user on vista or windows server 2008 May 4, 2008, 9:44 am
Disks filling up - how to track it July 20, 2005, 10:00 pm
track netbios to ip addres May 14, 2007, 9:29 pm
Best Way to Track Service Being Turned On? April 26, 2008, 8:06 pm
Failure Audits 529 & 680: How to track the IP address? July 13, 2005, 3:48 pm
Possible to track user's file system usage? March 20, 2006, 11:44 am
Track transfer of files from desktop system September 7, 2007, 2:42 pm
Track user/computer/ip by Caller Logon ID April 28, 2008, 1:20 am

The site map in XML format XML site map

Contact Us | Privacy Policy