Hi,

I've configured AntiSpyware to block MS ActiveSync from
modifying startup registry. When ActiveSync attempts to
modifying the registry, AntiSpyware does report that it've
blocked the modification. However, the startup registry is
still modified when I inspect it later (and MS ActiveSync
does start automatically when I restart the system). Is it
a bug or feature?

Thanks.

What registry key are you looking at?

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
"Eureka" <(E-Mail Removed)> wrote in message
news:16be01c5300e$23f1ed20$(E-Mail Removed)...
> Hi,
>
> I've configured AntiSpyware to block MS ActiveSync from
> modifying startup registry. When ActiveSync attempts to
> modifying the registry, AntiSpyware does report that it've
> blocked the modification. However, the startup registry is
> still modified when I inspect it later (and MS ActiveSync
> does start automatically when I restart the system). Is it
> a bug or feature?
>
> Thanks.
>
>

Didn't you get a notification that the modification was being allowed? As I
recall, regardless of the wording of the System Tools blocking dialog, you
can't permanently block a "known" application.

I would view this as a feature, myself--Microsoft Antispyware isn't designed
as a general-purpose uninstaller or blocking mechanism.
--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

"Eureka" <(E-Mail Removed)> wrote in message
news:16be01c5300e$23f1ed20$(E-Mail Removed)...
> Hi,
>
> I've configured AntiSpyware to block MS ActiveSync from
> modifying startup registry. When ActiveSync attempts to
> modifying the registry, AntiSpyware does report that it've
> blocked the modification. However, the startup registry is
> still modified when I inspect it later (and MS ActiveSync
> does start automatically when I restart the system). Is it
> a bug or feature?
>
> Thanks.
>
>