CSA prevents remote application from accessing the registry

Unanswered Question
Aug 2nd, 2009

Hi all,

I have recently install CSA 6.01.106 and I am getting the following notification in the event log.

Audit: The process '<remote application>' (as user PROD01\S60MP6I$) attempted to access the registry key '\REGISTRY\MACHINE' and value ''. The attempted access was an open (operation = OPEN/KEY). The operation would have been denied.

does anyone know how to create an execption without creating a blanket rule to permit everything?

Or are you able to provide me with some more tips to assist me with what is going on here?

many thanks

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
tsteger1 Mon, 08/03/2009 - 09:52

You can create a user state that will allow remote connections if it is legitimate.

It may be trying to read permissions to connect or run an application.

Tom

Actions

This Discussion