View MDO database (O6)

Showing entries 51 to 75 of 107.

Go directly to page: 1 2 3 4 5

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0
This setting forces the Logoff button to appear on the Start menu and prevents users from removing or hiding it. Default value = 0
http://www.pctools.com/guides/registry/detail/1046/
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
This setting means: No Display the UAC dialog box for the Adminstrator. It may have been set by a IT Administrator.
http://www.computerperformance.co.uk/vista/ConsentPromptBehavior.htm
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 2
Set by Admin - Related to UAC (User Account Control)
http://www.computerperformance.co.uk/vista/user_account_control.htm#Latest_Method_for_Vista_-_Local_Policy
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
Set by Admin - Related to UAC (User Account Control)
http://www.computerperformance.co.uk/vista/user_account_control.htm#Latest_Method_for_Vista_-_Local_Policy
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 0
Account Control for Users to suppress the User account Control (UAC) dialog box.
http://www.computerperformance.co.uk/vista/ConsentPromptBehavior.htm
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 1
The value must be 1 or 2.
http://msdn.microsoft.com/en-us/library/cc232762%28PROT.13%29.aspx
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 2
Set by Admin - Related to UAC (User Account Control)
http://www.computerperformance.co.uk/vista/user_account_control.htm#Latest_Method_for_Vista_-_Local_Policy
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
Set by Admin - Related to UAC (User Account Control)
http://www.computerperformance.co.uk/vista/user_account_control.htm#Latest_Method_for_Vista_-_Local_Policy
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: disablecad = 0
The function of this setting is to control if users are asked to press Ctrl + Alt + Delete as a security precaution before they log into the system. 1 = Disable
http://www.pc1news.com/requiring-users-to-press-ctrl-alt-delete-before-logon-971.html
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
The function of this setting is to control if users are asked to press Ctrl + Alt + Delete as a security precaution before they log into the system. 1 = Disable
http://www.pc1news.com/requiring-users-to-press-ctrl-alt-delete-before-logon-971.html
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
this setting allows the registry editor to run.
http://www.freefixer.com/library/regdata/119/
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStartupSound = 1
Disable Startup Sound.
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0
Showing Verbose Security Status Messages on Startup, Shutdown, Log on, Log off
http://www.pc1news.com/showing-verbose-security-status-messages-1136.html
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
Disable Task Manager
http://www.pctools.com/guides/registry/detail/163
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLockedUserId = 3
3 = Do not display the locked user information - May have been set by an IT Admin.
http://support.microsoft.com/kb/837022
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 0
This option SHOULD be used to disable the automatic detection of installation packages that require elevation to install.
http://msdn.microsoft.com/en-us/library/cc232763%28PROT.10%29.aspx
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
This option SHOULD be used to heuristically detect applications that require an elevation of privilege to install.
http://msdn.microsoft.com/en-us/library/cc232763%28PROT.10%29.aspx
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
Mapped Drives Are Seen From Elevated Command Prompt in Vista
http://www.winhelponline.com/blog/mapped-drives-are-not-seen-from-elevated-command-prompt-in-vista/
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
Disabling this policy disables the "administrator in Admin Approval Mode" user type.
http://msdn.microsoft.com/en-us/library/cc232765%28PROT.13%29.aspx
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
This policy enables the "administrator in Admin Approval Mode" user type while also enabling all other User Account Control (UAC) policies
http://msdn.microsoft.com/en-us/library/cc232765%28PROT.13%29.aspx
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 0
User Account Control: Only elevate UIAccess applications that are installed in secure locations 0 = Disabled, 1 (Default) = Enabled
http://technet.microsoft.com/en-us/library/dd835564%28WS.10%29.aspx
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
User Account Control: Only elevate UIAccess applications that are installed in secure locations 0 = Disabled, 1 (Default) = Enabled
http://technet.microsoft.com/en-us/library/dd835564%28WS.10%29.aspx
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
disables the UIAccess applications to prompt for elevation without using the secure desktop.
http://www.askvg.com/how-to-tweak-user-account-control-uac-options-in-windows-vista-home-basic-home-premium/
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
When the user navigates to a directory that contains files virtualized, Explorer displays a button. 0 (disabled); 1 (enabled).May have been set my an IT Administrator.
http://social.technet.microsoft.com/search/pt-br?query=EnableVirtualization&refinement=9
Windows ALL; discovered by nasdaq

(Q) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
Only the built-in administrator account (RID 500) MUST be placed into Full Token or Windows® XP operating system native mode.
http://msdn.microsoft.com/en-us/library/cc232760%28v=prot.10%29.aspx
Windows ALL; discovered by nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.