ADPro: Registry ReACL Access Denied Errors Symantec Endpoint Protection (4317025)

Return

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Title

ADPro: Registry ReACL Access Denied Errors Symantec Endpoint Protection
Description

ADPro: Registry ReACL Access Denied Errors Symantec Endpoint Protection
Resolution
Issue

ReACL error:

Access is denied.

Cause

Symantec Endpoint Protection has a tamper protection feature that prohibits the modification of registry keys associated with their software. ReACL will indicate an Access is denied error and ReACL status of Failed if these keys are accessed while the tamper protection feature is enabled.

Solution

You can choose to Ignore ReACL status during cut-over or disable the tamper protection before you perform the ReACL.
See Symantec support article for disable steps.

https://support.symantec.com/en_US/article.TECH192023.html
Disable Tamper Protection on a single client - Use this method to disable Tamper Protection on a small number of clients. To disable Tamper Protection on multiple clients, use the method below.
1. Open SEP client interface.
2. Click Change Settings
3. Click Configure Settings (next to Client Management)
4. Click the Tamper Protection tab
5. Perform one of the following actions:
  Uncheck Protection Symantec security software from being tampered with or shut down. This disables Tamper Protection.
  Change the dropdown menu to Log only. Note: This setting leaves Tamper Protection enabled, however, Tamper Protection will no longer block attempts to modify SEP's files, folders, processes, and Registry values.
6. Click OK. Tamper Protection is now disabled for this SEP client.
Disable Tamper Protection on multiple clients
1. Open the SEPM console
2. Click Clients
3. Select the client-group you want to modify
4. Click the Policies tab
5. Click General Settings
6. Click the Tamper Protection tab
7. Perform one of the following actions:
  Uncheck Protection Symantec security software from being tampered with or shut down. This disables Tamper Protection.
  Change the drop down menu to Log only. Note: This setting leaves Tamper Protection enabled, however, Tamper Protection will no longer block attempts to modify SEP's files, folders, processes, and Registry values.
8. Click OK. Tamper Protection will be disabled for clients within this client-group and clients within client-groups which inherit policies from this group as soon as they receive the updated policy from the SEPM.

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Request a KB Article

ADPro: Registry ReACL Access Denied Errors Symantec Endpoint Protection (4317025)

Title

Description

Resolution

Leave a Comment