I have being assigned to look into a group of users which either they belong to the same OU or different one, but looking at these MSS settings, some users can query the registry and other users can not. I have ran the gpresults and I can not find the settings explicit as others registries I might see. I know some are being configure because when I query the registry in some users I get an entry; such as
reg query HKLM\System\CurrentControlSet\Services\Tcpip\Parameters /v DisableIPSourceRouting.
1. Which is best approach to narrow down where exactly these settings are overwritten.
2. I there a tool that allows me to do this.....or the process needs to be done manual...
3. I read an article which says in roder to see these settings in the GPO editor, I need to include the .adm template for this
settings. which is the easier way, some say revise the inf file. (Machines are in a Windows 2008R2 and Windows 7)
These are the settings, threre are more but these are the only one that the scanner complains.
CCE-8513-4:MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes
|
michael john ocasio