How to setup ESM registry module
I have a registry key that is not define and would like ESM manager to help to to check during the scan. May I know how should I enter the entry to the esm template base on the example given below?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\FilterAdministratorToken (Not define)
Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Check Time: Uncheck
Required: Should I enter Mandtory/Forbidden? Since this is not define in the registry value
Subkey Search Depth: 0
Enable ACL Checking: Uncheck
Inside check values:
Value Name: FilterAdministratorToken
Value Type: Should I enter DWORD VALUE/NONE?
Value Data Regular Expression: IF DWORD VALUE, is not define value equal ^0$?
Comments: User Account Control: Admin Approval Mode for the Built-in Administrator account