Not out of the box. You might be able to set something up, but by default there is nothing in OSSEC that will do this.
On Thu, May 17, 2012 at 12:04 PM, A-Dubbs <[email protected]> wrote: > Can OSSEC enforce Windows Group Policy settings from being changed in > Windows Server 2008 R2? I made changes to Windows basic audit policy > and upon reboot, the settings are back what it was before I modified > them. OSSEC in installed on this system and I'd like to know if OSSEC > HIDS can prevent Windows Group Policy settings from being altered.
