Where does it look to decide if a server complies or not??
For example we do have a strong password policy but it's enforced through group policy (default domain policy I think) and the HIPAA compliance checker thinks we fail this test...
A few other settings we use the HIPAA compliance checker does not catch/find/know about...
I understand it's a tool VMware offers to get people to buy VCM but still...
Sometime I will download and run the VCM trial and use that as long as I can...
Thank you, Tom