1.1.2.6 Set 'Audit Policy: Policy Change: MPSSVC Rule-Level Policy Change' to 'No Auditing'

Information

This subcategory reports changes in policy rules used by the Microsoft Protection Service (MPSSVC.exe).

Solution

Make sure 'Policy Change: MPSSVC Rule-Level Policy Change' is set to no auditing.

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12c.

Plugin: Windows

Control ID: bdd85817a32cd506429d881870c8ca7f16e42f6052f947288d21e6a3a1e2f525