I need to know who access and changed the registry. I am looking for a way in which I can configure SCOM to send me an e-mail when it picks/ detect any Registry modifications.
Hi, Take a look at this KB http://support.microsoft.com/default.aspx/kb/324739 , it describes how you can audit registry keys. You can then configure Ops Mgr to collect and generate alerts based on those security events.Anders Bengtsson | Microsoft MVP - Operations Manager | http://www.contoso.se
