Registry Permisisons changing

[Richard Winstock]

Hi All,

Forgive me if this has been answered before, I've been scanning for
ages, but not seen anyone else with this problem.

I've got a customer with a Win 2K Pro machine, part of a Domain. We've
deployed one of our software packages to it, and are running into the
strangest issue. After a few minutes of running, the app which reads
the registry for certain settings suddenly reports an error reading
the registry. On investigation using regedt32 we've suddenly lost
permission to read our key, which is
HKLM\software\[companyname]\[productname]\Settings. It's only that
last key which is effected. Logging on and off restores permissions!

Our program doesn't even write to the registry, just reads it!

Anyone got any ideas? Would be very grateful for suggestions!

Thanks a lot,


Rich

 

[Mark V]

Hi All,

Forgive me if this has been answered before, I've been scanning
for ages, but not seen anyone else with this problem.

I've got a customer with a Win 2K Pro machine, part of a Domain.
We've deployed one of our software packages to it, and are running
into the strangest issue. After a few minutes of running, the app
which reads the registry for certain settings suddenly reports an
error reading the registry. On investigation using regedt32 we've
suddenly lost permission to read our key, which is
HKLM\software\[companyname]\[productname]\Settings. It's only
that last key which is effected. Logging on and off restores
permissions!

Our program doesn't even write to the registry, just reads it!

Anyone got any ideas? Would be very grateful for suggestions!

Not yet.

When you say "lost permissions" do you mean the the regigistry ACLs
were changed or are you just get an error message about read failure?
Full text of message and/or Event Log entry (if any)?

Does turning on Auditing for that key/sub-keys reveal anything?
Or monitoring using REGMON (sysinternals) perhaps.

Just some thoughts.