AD auditing and registry

[Arne]

Does anyone know which registry keys correspond with the following:
Settings for CN=Schema,CN=Configuration,DC=ForestRootDomain -
Modify Permissions
Modify Owner
Create All Child Objects
Delete
Delete All Child Objects
Delete Subtree
Write All Properties
Change Schema Master
All Extended Rights

Our security checking tool will not check schema auditing but it can be
customized to check registry keys.

Thanks

 

[Roger Abell [MVP]]

If I understand the question, the answer is that there are no such reg keys.
Those are bits in the security descriptor of the named AD object, stored
in the AD database.

 

[Arne]

Roger,

Thanks for replying. I was afraid that may be the answer.