topic Harmony Endpoint - Compliance - Regedit for admin rights in Endpoint

Harmony Endpoint - Compliance - Regedit for admin rights

jfernandezm — Tue, 23 Jul 2024 17:37:28 GMT

Hi Everyone!

I'm exploring the Compliance blade on CHeckpoint Harmony Endpoint, and i'm looking for detection of every user on the organizacion who had admin privileges /rights on his user account.

I was checking if any register on regedit could be matched with the compliance blade to detect this.

Thanks for your help!

Re: Harmony Endpoint - Compliance - Regedit for admin rights

PhoneBoy — Tue, 23 Jul 2024 18:36:28 GMT

The canonical source for this information would be Active Directory.
Why are you querying it on the individual PC?

I assume somewhere in HKEY_CURRENT_USER there is some indication of the user permission level.
However, that's probably more of a Microsoft question.

Re: Harmony Endpoint - Compliance - Regedit for admin rights

lluner — Tue, 23 Jul 2024 19:21:42 GMT

Could use a powershell script and send the admin users to a database