Hello,
Do you know where I can find, in the registry, the matching value "Audit: Shut down system immediately if unable to log security audits" ?
Is there a other way to interrogate a Windows server (not a DC), thoughs command lines , on this configuration "Audit: Shut down system immediately if unable to log security audits" ?
The goal is to build an inventory, not to make any change.
In fact, "Audit: Shut down system immediately if unable to log security audits" is just an example of what we search.
We many many items to search for many servers.Also, the changes are done by people Inside Active Directory, and directly on each server Inside local GPO.
We try to build a tool to control this activity.
Regards,