Can CSA permit read only access to the registry

Unanswered Question
Jul 29th, 2009
User Badges:

Hi Can CSA be configured to permit read only access to registry settings and still block write access.


As far as I can tell I need to grant write access as well as read.


Many thanks


Ian Vickery

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
htarra Tue, 08/04/2009 - 13:42
User Badges:
  • Bronze, 100 points or more

Registry access control rules (Windows only)


The behavior analysis creates these rule types but disables them by default. Registry access control rules are very powerful system control tools. Restricting access to a required registry key could produce undesired results.


The behavior analysis creates Registry Set variables based on the registry resources accessed during the logging period. These registry variables are broken into those that should be allowed and those that can be denied. Those allowed are registry keys accessed during the logging period. All others fall in the deny range. This deny applies only to write access. All registry keys are still allowed read access. You can enable these rules, but you should understand the restrictions you are imposing.


Use Registry Key Summary reports to help refine these rules, if needed.



Actions

This Discussion