Check Group Policy: Computer Configuration \ Windows Settings \ Security 
Settings \ System Services

Remote Registry can be set to Automatic, Manual, or Disabled.






"Kelly, Jim" <[EMAIL PROTECTED]> 
Sent by: [EMAIL PROTECTED]
01/11/2008 06:33 AM

To
<[email protected]>
cc

Subject
Remote Registry Service






Thanks to all who answered my mhtml question of yesterday. I solved the 
problem by getting the xml files for the scans, importing them into Nessus 
for Windows and viewing them there.
 
One problem I keep stubbing my toe on is Remote Registry.
As all of you are already aware, Nessus needs remote access to the target 
registry to determine if various Hotfixes and patches have been applied. 
Now many secured environments have decided to turn off the Remote Registry 
service. The new OMB mandated FDCC ?approved? desktop image for Federal 
desktops has Remote Registry turned off by default.
 
My question is how can Remote Registry be temporarily turned on for 
scanning purposes? Can an AD GP be used for this purpose?
I?ve searched the Microsoft site and found 
http://support.microsoft.com/kb/314837
The solutions mentioned therein don?t appear to be practical for my 
purposes.
 
Any help would be appreciated.
 

---------------------------------------------------------
James Kelly
Senior Information Assurance Engineer
SRA International, Inc.
(703)284-8266
 _______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus

<<image/gif>>

_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to