Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

MS office regedit and CSA

I'm getting many events like below. I'm thinking it might be a legitimate event possibly a macro causing it.

Have you seen office generate these types of events in csa? Should I allow it?

1224 10/28/2005 3:19:57 PM CKTXXXKLXLH1F.corp.keybank.com Alert TESTMODE: The process 'C:\Program Files\Microsoft Office\Office\WINWORD.EXE' (as user NT_A\yarboch) attempted to access 'C:\Program Files\Common Files\Microsoft Shared\Artgalry\cag.exe'. The attempted access was a read (operation = OPEN/READ). The operation would have been denied. Details Rule 1004 Wizard

1222 10/28/2005 3:19:56 PM CKTXXXKLXLH1F.corp.keybank.com Alert TESTMODE: The process 'C:\Program Files\Microsoft Office\Office\WINWORD.EXE' (as user NT_A\yarboch) attempted to access 'C:\WINNT\regedit.exe'. The attempted access was a read (operation = OPEN/READ). The operation would have been denied. Details Rule 1004 Wizard

1 REPLY
New Member

Re: MS office regedit and CSA

103
Views
0
Helpful
1
Replies
CreatePlease to create content