Write denied events for the "Uninstall" registry key with Change Control 6.1.2 installed

Technical Articles ID: KB81714
Last Modified: 12/19/2019

Environment

McAfee Application and Change Control (MACC) 6.1.2

Microsoft Windows – all supported versions

Problem

Write denied events for the Windows Uninstall registry key are reported. These events occur when there is no registry protection rule configured on a system with MACC installed. A user might observe write denied events for the following registry keys if Windows update or any application installation/update is triggered:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
Application-specific registry

Solution

This issue is resolved with MACC 6.1.3.357.

McAfee product software, upgrades, maintenance releases, and documentation are available from the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.

Workaround

Create an Advance Exclusion Filter (AEF) rule for event_type = REG_KEY_WRITE_DENIED.

Affected Products

Application and Change Control 6.1
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Japanese

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Write denied events for the "Uninstall" registry key with Change Control 6.1.2 installed

Environment

Problem

Solution

Workaround

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Featured Solutions:Draft for New Nav

Explore Our Portfolio

Security Outcomes

Industries

Products

Featured Solutions

Explore Our Portfolio

MVISION Products

Services & Training

Threat Research

Our Researchers

Threat Landscape Dashboard

Tools

Contact Us

Resources

Downloads

Product Help

Connect with Us

Explore

Our Company

Our Efforts

Other Resources

Careers

Partnerships

Write denied events for the "Uninstall" registry key with Change Control 6.1.2 installed

Environment

Problem

Solution

Workaround

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title