CSA prevents remote application from accessing the registry

[ivickery]

Hi all,

I have recently install CSA 6.01.106 and I am getting the following notification in the event log.

Audit: The process '<remote application>' (as user PROD01\S60MP6I$) attempted to access the registry key '\REGISTRY\MACHINE' and value ''. The attempted access was an open (operation = OPEN/KEY). The operation would have been denied.

does anyone know how to create an execption without creating a blanket rule to permit everything?

Or are you able to provide me with some more tips to assist me with what is going on here?

many thanks

[tsteger1]

You can create a user state that will allow remote connections if it is legitimate.

It may be trying to read permissions to connect or run an application.

Tom