henderson2001mis
Member
I need to audit the HKEY_CLASSES_ROOT of a Windows 2000 machine to figure out what keys a certain program is trying to write to. I have auditing of objects enabled, and I can audit all other hives of the registry, but I can't audit the HKEY_CLASSES_ROOT. When I go to security|permissions|advanced and click on the auditing tab in regedt32, the add button is greyed out. How can I enable auditing for this hive??
Thanks!!!
Thanks!!!