By default do you mean default settings, or OSSEC will not perform this function the way it comes programmed?
On May 17, 12:28 pm, "dan (ddp)" <[email protected]> wrote: > Not out of the box. You might be able to set something up, but by > default there is nothing in OSSEC that will do this. > > > > > > > > On Thu, May 17, 2012 at 12:04 PM, A-Dubbs <[email protected]> wrote: > > Can OSSEC enforce Windows Group Policy settings from being changed in > > Windows Server 2008 R2? I made changes to Windows basic audit policy > > and upon reboot, the settings are back what it was before I modified > > them. OSSEC in installed on this system and I'd like to know if OSSEC > > HIDS can prevent Windows Group Policy settings from being altered.
