cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
368
Views
5
Helpful
1
Replies

CSA prevents remote application from accessing the registry

ivickery
Level 1
Level 1

Hi all,

I have recently install CSA 6.01.106 and I am getting the following notification in the event log.

Audit: The process '<remote application>' (as user PROD01\S60MP6I$) attempted to access the registry key '\REGISTRY\MACHINE' and value ''. The attempted access was an open (operation = OPEN/KEY). The operation would have been denied.

does anyone know how to create an execption without creating a blanket rule to permit everything?

Or are you able to provide me with some more tips to assist me with what is going on here?

many thanks

1 Reply 1

tsteger1
Level 8
Level 8

You can create a user state that will allow remote connections if it is legitimate.

It may be trying to read permissions to connect or run an application.

Tom

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: