Windows Compliance - REGISTRY_SETTING check type...
Windows Compliance - REGISTRY_SETTING check type enhancement Summary A new tag called reg_include_hku_users was added to the Windows Compliance REGISTRY_SETTING check type. The purpose of this tag is to allow additional filtering of registry locations when checking HKEY_USERS. For example: <custom_item> type: REGISTRY_SETTING description: "HKU\Control Panel\Desktop\ScreenSaveActive" value_type: POLICY_DWORD value_data: 1 reg_key: "HKU\Control Panel\Desktop" reg_item: "ScreenSaveActive" </custom_item> Would loop over: HKU\S-1-5-18\Control Panel\Desktop\ScreenSaveActive HKU\S-1-5-19\Control Panel\Desktop\ScreenSaveActive HKU\S-1-5-20\Control Panel\Desktop\ScreenSaveActive HKU\S-1-5-21-1004336348-1177238915-682003330-1001\Control Panel\Desktop\ScreenSaveActive HKU\S-1-5-21-1004336348-1177238915-682003330-1002\Control Panel\Desktop\ScreenSaveActive HKU\S-1-5-21-1004336348-1177238915-682003330-1003\Control Panel\Desktop\ScreenSaveActive ... To limit the scope to SIDS that start with S-1-5-21- you can now add the following tag to the check: reg_include_hku_users: "S-1-5-21-*" Target Release Date Immediate