-
Title
RUM processing of workstation show warning in registry section -
Description
When RUM is processing workstation, all components are processed successfully, however registry processing display warnings. Log examination show Access Denied errors on several keys:
\\<machine_name> Registry Error 5 Access is denied. SYSTEM\WaaS\Upfc (RegCreateKeyEx)
\\<machine_name> Registry Error 5 Access is denied. SYSTEM\WaaS\WaaSMedic (RegCreateKeyEx)There are also Access Denied errors on access to antivirus-related keys.
-
Cause
Windows protection on Windows Update keys
Antivirus blocking access due to its tamper-protection policies -
Resolution
It's not possible to modify there registry keys by RUM dual-ACL process because SYSTEM\Waas\... registry keys are protected from modification by administrators and backup admins as these keys belong to Windows Update health checks.
Antivirus is also blocking access to its own registry keys because of tamper-protection mechanisms.
The issue is not affecting resource processing and can be safely ignored.