Which report indicates whether or not Syskey is enabled on a Windows NT machine? (NETIQKB36996)

goal
Which report indicates whether or not Syskey is enabled on a Windows NT machine?

fact
VigilEnt Security Manager 4.1

fix
There is a Security Check in VigilEnt Security Manager (VSM) called Syskey Installed.  When a template containing this check is run against an endpoint, it will state whether or not Syskey is enabled.  The following steps outline how to set up a Security Checkup template with just the Syskey Installed check enabled:

1. Launch VigilEnt Security Operations Center logged in as a VSM account with administrative type privileges.
2. In the left tree pane, expand the VigilEnt Security Manager node. 
3. Right click the Security Checkups node and select VSM Actions | New Security Checkup.
4. Under Template Name, type a name for the checkup.
5. Click the Windows tab and locate the check for Syskey Installed.  It is located under the System category.
6. Click the check box next to Syskey Installed.
7. Click OK to save the template.
8. Click OK again to acknowledge the creation popup.

The following steps outline how to run the Security Check against your Windows NT machine:

1. Browse to the Windows NT endpoint in the left tree pane.  It will be located under your specific folder within the Managed Groups | My Groups node.
2. Right click the endpoint located in the right pane and select VSM Actions | Run Security Checkup.
3. Select the saved template containing the Syskey Installed check.
4. Click the Run Now button.  This will run the check against the Windows NT endpoint.

Formerly known as NETIQKB36996