Forum Discussion
d_irving
Aug 08, 2022Copper Contributor
Policy Analyzer showing incorrect values
Today I created a backup of my group policy objects and compared them to Microsoft's baselines. But, the GPO backup seems to be displaying the wrong values in Policy Analyzer. As seen in...
d_irving
Aug 09, 2022Copper Contributor
I found the GptTmpl.inf for those two policy settings and it displays this -
MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymous=4,0
MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymousSAM=4,0
What am I supposed to do with this information?
AaronMargosis_Tanium
Aug 09, 2022Iron Contributor
d_irving Well, it's showing that Policy Analyzer is correctly rendering the GPOs you backed up.
The syntax for the [Registry Values] part of the security template is:
key\valuename=type,data
type 4 is REG_DWORD, and it's set to 0, which is what Policy Analyzer is reporting.
Are you certain that the GPOs you're backing up and importing into Policy Analyzer are the same ones that you're looking at on the right-hand side of the screenshot you posted?