Posted: Wed Sep 24, 2014 8:12 pm Post subject: Prevent Windows administrator from disabling events
Chevalier
Joined: 20 Sep 2005 Posts: 406
Hi,
In my environment, there are windows system administrator who have the administrator rights doing windows patching etc and there are MQ administrator who administrates MQ. The two group are from different department. The MQ administrator turn on the MQ event to audit the change of MQ AMS policy. An application is listening to the event queue and send alert when there are changes. This is to track who turn on/off the MQ AMS policy as the system administrator will have mqm rights by default and no way to remove it.
However, my concern is the system administrator will be able to turn off the MQ event and the AMS policy and thus there wont be any alert and they will be able to see all the sensitive content in the queue when new messages arrived. Is there a way to prevent the windows system administrator to turn off the MQ event?
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum