Return
-
Title
AD Sync Device Cutover migration failed with error 'BT cutover Canceled'. Access Denied errors about updating the registry. Immunet Protect. Some kind of anti virus -
Description
Cutover migration failed with error 'BT-cutover - Canceled'. Right at the point of the errors there's Access Denied errors about updating the registry. Immunet Protect.
In the agent log file we see:12:10:49.0681664 - Info[3]: CmdLine job BT-ReACLPrepareWin10Profiles is started.12:10:49.3183671 - Info[3]: CmdLine job BT-ReACLPrepareWin10Profiles is in progress.12:11:39.8543462 - Error[3]: CmdLine job BT-ReACLPrepareWin10Profiles is failed.Unable to update Registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Immunet Protect': System.ComponentModel.Win32Exception (0x80004005): SetSecurityInfo: Access is deniedUnable to update Registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Immunet Protect': System.ComponentModel.Win32Exception (0x80004005): SetSecurityInfo: Access is denied -
Cause
anti-virus (AV) software. ODM would not have access to the AV Registry Key and it will naturally deny access. -
Resolution
Use the exclude registry key from processing. Attached is a Word document with screenshots showing where to set that up.It will need an entry for each of the registry entries that got flagged in the agents log (attached). But you can use wildcard characters.In the Exclude These Registry Keys From Processing box, enter registry keys that will not be included in the ReACL process. A leading '\' is not necessary. Separate the paths by pressing Enter. The following wild card characters are permitted when specifying registry keys:* matches zero or more characters in a key name, but not the '\' path delimiter.? matches any single character.** matches zero or more parent keys.Examples:HKEY_LOCAL_MACHINE\SOFTWARE\XYZ – a single keyHKEY_LOCAL_MACHINE\SOFTWARE\XY* – all keys starting with "XY" in HKEY_LOCAL_MACHINE\SOFTWAREHKEY_LOCAL_MACHINE\SOFTWARE\?YZ – all 3-character keys ending with "YZ" in HKEY_LOCAL_MACHINE\SOFTWAREHKEY_LOCAL_MACHINE\**\XYZ – all keys named "XYZ" anywhere under HKEY_LOCAL_MACHINE**\XYZ – all keys named "XYZ" in any registry hive -
Attachments