LSA/LLMNR Report

[aplechaty]

We recently had to make some GP changes as below I am hoping for some assistance in how to get a report on network systems to verify they are actually set.

Network security: Do not store LAN Manager hash value on next password change ENABLED
and
Turn off multicast name resolution ENABLED
and
Hive HKEY_LOCAL_MACHINE
Key path SYSTEM\CurrentControlSet\Control\Lsa
Value name RunAsPPL
Value type REG_DWORD
Value data 0x1 (1)

The hope is to see which systems received the policy and applied the changes. Thanks in advance.

[brandon_jones · Accepted solution]

In the scanning menu click on File and Registry scanning. Under registry scanning add the key(s) that you want scanned. After the registry is scanned you can look in the windows: registry scanning results report to if the GP changes worked. You can also click the report link beside the registry scan that you added to view the report for that one registry path.