Re: Granting access to HKLM/Software/<application>

Hi,

Under Options you can find a Filter where you enter only name of your
application (e.g. application.exe) instead of *. Now Regmon will only show
registry access done by application.exe

You have to run regmon on a computer where application will be run.

--
Mike
Microsoft MVP - Windows Security


"MyndPhlyp" <nobody@xxxxxxxxxxxxx> wrote in message
news:%23%23ds5UG6GHA.4112@xxxxxxxxxxxxxxxxxxxxxxx
Hmm. Lots of Registry chatter.

Run it from the workstation or the server?

How do I determine when the workstation is attempting to access the
server's
key? (RTFM didn't help.)



"Miha Pihler [MVP]" <mihap-news@xxxxxxxxxxx> wrote in message
news:%23OcuU%23F6GHA.3572@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

You can download the tool called RegMon from www.sysinternals.com.

Once you have it running on your computer - run the application and it
will
show you what registries are getting called and if there are any access
denied on these registries... This should help you troubleshoot the
problem...




.

Relevant Pages

  • Re: Failed To Install Any Update From Web Only
    ... > Hi Robert, ... I think you are only going to be able to get a handle on this with RegMon. ... Certainly the timestamps in these log records are going to be useless for ... It always prompts you for an Include filter before starting. ...
    (microsoft.public.windowsupdate)
  • Re: Cant see PNG images !
    ... accesses, RegMon sometimes logs all the "read" attempts, and sometimes it does not respect my Exclude filter. ... Ramesh, Windows XP MVP ... I didn't mention yesterday that some inexplicable entries for AR7.02's ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • =?iso-8859-1?Q?Re:_Re:_Re:_Re:_Re:_Verz=F6gertes_=D6ffnen.?=
    ... sind regMon und FileMon von Sysinternals. ... Den Filter ...
    (microsoft.public.de.german.inetexplorer.ie6)
  • Re: ASP.Net 1.1, Win 2003, IIS6, System.Diagnostics.Process, run notep
    ... Try filemon and regmon to see if you are getting some sort of access denied ... when attempting to execute that. ... You can set them to filter on w3wp.exe. ...
    (microsoft.public.dotnet.security)
  • Re: unsigned content run unsigned content run in sandbox
    ... Enable/Run in sandbox/Prompt? ... Custom Settings | Edit Permissions | Unsigned Content | Run Unsigned ... Use RegMon and filter on iexplore*SetValue and find out. ...
    (microsoft.public.windows.inetexplorer.ie6.setup)