On Thu, May 17, 2012 at 1:52 PM, A-Dubbs <[email protected]> wrote: > By default do you mean default settings, or OSSEC will not perform > this function the way it comes programmed? >
I mean unless you set it up to do something like this it will not do it. So by default, it won't do this. > On May 17, 12:28 pm, "dan (ddp)" <[email protected]> wrote: >> Not out of the box. You might be able to set something up, but by >> default there is nothing in OSSEC that will do this. >> >> >> >> >> >> >> >> On Thu, May 17, 2012 at 12:04 PM, A-Dubbs <[email protected]> wrote: >> > Can OSSEC enforce Windows Group Policy settings from being changed in >> > Windows Server 2008 R2? I made changes to Windows basic audit policy >> > and upon reboot, the settings are back what it was before I modified >> > them. OSSEC in installed on this system and I'd like to know if OSSEC >> > HIDS can prevent Windows Group Policy settings from being altered.
