Write denied events for the "Uninstall" registry key with Change Control 6.1.2 installed

Technical Articles ID: KB81714
Last Modified: 12/19/2019

Environment

McAfee Application and Change Control (MACC) 6.1.2

Microsoft Windows – all supported versions

Problem

Write denied events for the Windows Uninstall registry key are reported. These events occur when there is no registry protection rule configured on a system with MACC installed. A user might observe write denied events for the following registry keys if Windows update or any application installation/update is triggered:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
Application-specific registry

Solution

This issue is resolved with MACC 6.1.3.357.

McAfee product software, upgrades, maintenance releases, and documentation are available from the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.

Workaround

Create an Advance Exclusion Filter (AEF) rule for event_type = REG_KEY_WRITE_DENIED.

Affected Products

Application and Change Control 6.1
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Japanese

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Knowledge Center

Write denied events for the "Uninstall" registry key with Change Control 6.1.2 installed

Environment

Problem

Solution

Workaround

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Knowledge Center

Write denied events for the "Uninstall" registry key with Change Control 6.1.2 installed

Environment

Problem

Solution

Workaround

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title