i did it , and it work. change active response disable yes to no On Wednesday, December 5, 2012 10:35:33 AM UTC+8, peng lin wrote:
> oh? In linux ,i need't enable active response. > in windows i must enable it ,so that in server can restart > windows'agent ? > On Tuesday, December 4, 2012 9:48:33 PM UTC+8, dan (ddpbsd) wrote: > >> On Tue, Dec 4, 2012 at 1:08 AM, peng lin <[email protected]> wrote: >> > can't restart windows agent in server ? >> > i think in server to restart all linux client is ok,but can't restart >> it in >> > windows. (i can't see any about restart information in windows >> /ossec/logs) >> > what happen ? >> >> Is active response enabled on the Windows agents? >> >
