Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
jfernandezm
Participant

Harmony Endpoint - Compliance - Regedit for admin rights

Hi Everyone!

I'm exploring the Compliance blade on CHeckpoint Harmony Endpoint, and i'm looking for detection of every user on the organizacion who had admin privileges /rights on his user account. 

I was checking if any register on regedit could be matched with the compliance blade to detect this.

Thanks for your help!

0 Kudos
2 Replies
PhoneBoy
Admin
Admin

The canonical source for this information would be Active Directory.
Why are you querying it on the individual PC?

I assume somewhere in HKEY_CURRENT_USER there is some indication of the user permission level.
However, that's probably more of a Microsoft question.

lluner
Advisor

hi 

Could use a powershell script and send the admin users to a database

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events