Unable to remove Registry Key

[Christopher Biow]

This question has appeared a few times in
microsoft.public.win2000.registry, but never with an answer.

I have a key used by Cisco VPN
install(HKEY_LOCAL_MACHINE\SOFTWARE\DeterministicNetworks\DNE\Parameters)
that is completely inaccessible. Regedit reports "Cannot open
Parameters: Error while opening key" Regedt32 shows the key in gray
and reports "Unable to display security information" if I choose
Security/Permissions. Same problem running as Administrator and as
System (running via the "at <time> /interactive" command.

Once again for clarity: regedt32 CANNOT display or change the security
permissions. (Previous threads on this question have gone 'round with
repeated suggestions that the security permissions should be changed,
followed by responses that they can't be changed. Lather, rinse,
repeat.)

Do to the un-controllability of this key, Cisco VPN fails while tryin
to rewrite it and rolls back the installation.

Any ideas?

 

[Dave Patrick]

You'll need to first take ownership of the key.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


:
| This question has appeared a few times in
| microsoft.public.win2000.registry, but never with an answer.
|
| I have a key used by Cisco VPN
| install(HKEY_LOCAL_MACHINE\SOFTWARE\DeterministicNetworks\DNE\Parameters)
| that is completely inaccessible. Regedit reports "Cannot open
| Parameters: Error while opening key" Regedt32 shows the key in gray
| and reports "Unable to display security information" if I choose
| Security/Permissions. Same problem running as Administrator and as
| System (running via the "at <time> /interactive" command.
|
| Once again for clarity: regedt32 CANNOT display or change the security
| permissions. (Previous threads on this question have gone 'round with
| repeated suggestions that the security permissions should be changed,
| followed by responses that they can't be changed. Lather, rinse,
| repeat.)
|
| Do to the un-controllability of this key, Cisco VPN fails while tryin
| to rewrite it and rolls back the installation.
|
| Any ideas?

 

[Christopher Biow]

"Christopher Biow" wrote:

| I have a key used by Cisco VPN
| install(HKEY_LOCAL_MACHINE\SOFTWARE\DeterministicNetworks\DNE\Parameters)
| that is completely inaccessible. Regedit reports "Cannot open
| Parameters: Error while opening key" Regedt32 shows the key in gray
| and reports "Unable to display security information" if I choose
| Security/Permissions. Same problem running as Administrator and as
| System (running via the "at <time> /interactive" command.

You'll need to first take ownership of the key.

How exactly does one "take ownership of the key" if Regedt32 reports
"Unable to display security information" if I choose
Security/Permissions?

If I can't even display the permissions or ownership, how do I change
them?

I have also tried taking ownership of the parent key, propagating to
the children of HKEY_LOCAL_MACHINE\SOFTWARE\DeterministicNetworks. The
result is "Registry Editor could not set owner on the key currently
selected, or some of its subkeys".

 

[Dave Patrick]

This link may help or contact Cisco support
http://www.deterministicnetworks.com/support/dnefaq.asp

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


:
| How exactly does one "take ownership of the key" if Regedt32 reports
| "Unable to display security information" if I choose
| Security/Permissions?
|
| If I can't even display the permissions or ownership, how do I change
| them?
|
| I have also tried taking ownership of the parent key, propagating to
| the children of HKEY_LOCAL_MACHINE\SOFTWARE\DeterministicNetworks. The
| result is "Registry Editor could not set owner on the key currently
| selected, or some of its subkeys".

 

[Christopher Biow]

This link may help or contact Cisco support
http://www.deterministicnetworks.com/support/dnefaq.asp

Bingo, and thank you very muchly!

I've since found that I can delete the key immediately after a reboot.

Then, a half-second later, something recreates it as a
double-seekrit-untouchable key that can't be viewed or altered.

It sounds like they are using the same approach that MS used for the
NT4 server-vs-workstation setting, with a registry entry backed by a
service that watches it for changes and resets it. Plus the
undocumented capability to produce registry keys that can't be owned
or altered.

So I'm off to Cisco to get a DNE uninstaller that the URL above says
they should have. The Cisco website
<http://www.cisco.com/warp/public/471/vpn3K_uninstall.html> actually
directs manual uninstallation of this key, which we've learned doesn't
work.

Funny how OEM software usually winds up being implemented wrong in the
retail product.