Solved

Can SCOM monitor UAC status on Windows Servers?

Posted on 2011-03-07
2
722 Views
Last Modified: 2012-06-21
We're looking for a SCOM 07 SR2 monitor that will tell us if someone has disabled UAC on a Windows Server.  Has anyone ever seen or created such a monitor.

If not, my only other thought is to create a rule that will monitor the specific event description and alert if it is found.

0
Comment
Question by:ITS-DCO
2 Comments
 
LVL 74

Expert Comment

by:Glen Knight
ID: 35066533
I've just checked a SCOM install and can find no way to achieve what you are after.
0
 
LVL 15

Accepted Solution

by:
wwwally earned 125 total points
ID: 35074513
Here is some information on which registry key you can check to see if UAC is disabled:
http://www.petri.co.il/disable_uac_in_windows_vista.htm
And here is an article on how to monitor regkey's
http://www.systemcentercentral.com/Downloads/DownloadsDetails/tabid/144/IndexId/12773/Default.aspx
The combination should provide you with a solution.

SCOM however is not the best tool to check configurations, have a look at SCCM and DCM for a more complete solution.
Regards,
Walter
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now