Video Screencast Help

How to setup ESM registry module

Created: 03 Jul 2012


I have a registry key that is not define and would like ESM manager to help to to check during the scan. May I know how should I enter the entry to the esm template base on the example given below?

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\FilterAdministratorToken   (Not define)

Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Owner: %Administrator%
Check Time: Uncheck
Required: Should I enter Mandtory/Forbidden?  Since this is not define in the registry value
Subkey Search Depth: 0
Enable ACL Checking: Uncheck

Inside check values:
Value Name: FilterAdministratorToken
Value Type: Should I enter DWORD VALUE/NONE?
Value Data Regular Expression: IF DWORD VALUE, is not define value equal ^0$?
Comments: User Account Control: Admin Approval Mode for the Built-in Administrator account