Re: AD auditing and registry

If I understand the question, the answer is that there are no such reg keys.
Those are bits in the security descriptor of the named AD object, stored
in the AD database.

"Arne" <atericks@xxxxxxxxxx> wrote in message
news:1140747017.512480.66020@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Does anyone know which registry keys correspond with the following:
Settings for CN=Schema,CN=Configuration,DC=ForestRootDomain -
Modify Permissions
Modify Owner
Create All Child Objects
Delete
Delete All Child Objects
Delete Subtree
Write All Properties
Change Schema Master
All Extended Rights

Our security checking tool will not check schema auditing but it can be
customized to check registry keys.

Thanks



.