Write denied events for the "Uninstall" registry key with Change Control 6.1.2 installed

Technical Articles ID: KB81714
Last Modified: 12/19/2019

Environment

McAfee Application and Change Control (MACC) 6.1.2

Microsoft Windows – all supported versions

Problem

Write denied events for the Windows Uninstall registry key are reported. These events occur when there is no registry protection rule configured on a system with MACC installed. A user might observe write denied events for the following registry keys if Windows update or any application installation/update is triggered:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
Application-specific registry

Solution

This issue is resolved with MACC 6.1.3.357.

Our product software, upgrades, maintenance releases, and documentation are available on the Product Downloads site.

NOTE: You need a valid Grant Number for access. See KB56057 - How to download Enterprise product updates and documentation for more information about the Product Downloads site, and alternate locations for some products.

Workaround

Create an Advance Exclusion Filter (AEF) rule for event_type = REG_KEY_WRITE_DENIED.

Affected Products

Application and Change Control 6.1 (EOL)
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Japanese

Knowledge Center

Write denied events for the "Uninstall" registry key with Change Control 6.1.2 installed

Environment

Problem

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Write denied events for the "Uninstall" registry key with Change Control 6.1.2 installed

Environment

Problem

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title