Alert for Registry Changes

(imported topic written by Vibhash91)

Will it be possible to create a single Fixlet for monitoring the change in registry at higher level (HKLM/Software/)i.e for complete hierarchy in HKLM/Software/? Whenever there is change in HKLM/Software/* registry parameter then the corresponding fixlet will become relevant. If yes then let me know how to create a fixlet for the same.

(imported comment written by BenKus)

Vibhash,

There is not a way to do general purpose monitor for any/all changes in a registry key. What you can do is create Fixlets/properties to check for specific values that you do not want to change and alert for the change.

For instance, a simple example is that you want to make sure that the key “HKLM\Software\Test” exists. You would write Fixlet that says:

exists key “HKLM\Software\Test” of registry

Similar methods can be used to check any registry value exists and check the value of any key to make sure it is set properly.

Ben