mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-25 11:47:23 +00:00
revised reg info
This commit is contained in:
parent
39f6ca2232
commit
18a836504c
@ -97,8 +97,8 @@ Audit only mode configures the SAMRPC protocol to do the access check against th
|
|||||||
|
|
||||||
|Registry|Details|
|
|Registry|Details|
|
||||||
|---|---|
|
|---|---|
|
||||||
|Path|HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa|
|
|Path|`HKEY_LOCAL_MACHINE|SYSTEM|CurrentControlSet|Control|Lsa`|
|
||||||
|Setting|RestrictRemoteSamAuditOnlyMode|
|
|Setting|`RestrictRemoteSamAuditOnlyMode`|
|
||||||
|Data Type|REG_DWORD|
|
|Data Type|REG_DWORD|
|
||||||
|Value|1|
|
|Value|1|
|
||||||
|Notes|This setting cannot be added or removed by using predefined Group Policy settings. <br> Administrators may create a custom policy to set the registry value if needed. <br> SAM responds dynamically to changes in this registry value without a reboot. <br> You can use the [Events 16962 - 16969 Reader](https://gallery.technet.microsoft.com/Events-16962-16969-Reader-2eae5f1d) script to parse the event logs, as explained in the next section.|
|
|Notes|This setting cannot be added or removed by using predefined Group Policy settings. <br> Administrators may create a custom policy to set the registry value if needed. <br> SAM responds dynamically to changes in this registry value without a reboot. <br> You can use the [Events 16962 - 16969 Reader](https://gallery.technet.microsoft.com/Events-16962-16969-Reader-2eae5f1d) script to parse the event logs, as explained in the next section.|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user