Forum

Ultimate Windows Security Forum » Security Log » 4657 - A registry value was modified » Regarding the event for "A registry value was...

Regarding the event for "A registry value was... Expand / Collapse
Rate Topic
Display Mode
Topic Options
Author
Message
Sundar Ponnusamy
Posted 8/7/2014 9:38:12 AM
Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Forum Members
Last Login: 2/19/2015 5:29:35 AM
Posts: 10, Visits: 11
Hi Team,

We are not able to see the event ID: 4657 (A registry value was modified) in domain controller events.

Please let me know if any auditing needs to be enabled to get these events in domain controller.

Kindly help me...

Regards,

Sundar

Post #1367
derekthomas
Posted 9/8/2014 6:44:16 PM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 237, Visits: 0
Yes, Object Access for "Registry" success needs to be enabled. Check this setting to see if you should be logging this event.
Post #1565
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 9:30am