Software Management Detection Rules for HKCU registry keys when running managed delivery policy with Currently Logged in User.

Article:TECH139526  |  Created: 2010-09-10  |  Updated: 2012-08-20  |  Article URL http://www.symantec.com/docs/TECH139526
Article Type
Technical Solution


Environment

Issue



Software Management Detection Rules for HKCU registry keys when running managed delivery policy with Currently Logged in User.


Error



N/A


Environment



Software Management Solution 7.0 Sp2 MR1 - 7.1 SP2
Symantec Management Platform 7.0 Sp4 HF1 - 7.1 SP2


Cause



Detection rules are evaluated with the Agent credentials (System account).
Access to "HKEY_CURRENT_USER" is redirected to "HKEY_USERS\.DEFAULT".
 


Solution



This is working as per the current design.
It is recommended to use HKLM based registry keys for detection rules accessing the registry.
NOTE: A backslash must be used at the end of any registry key path within a detection rule.

We can recommend submitting a Feature request at www.symantec.com/connect/ideas for the feature; explaining how the product would be used.




Article URL http://www.symantec.com/docs/TECH139526


Terms of use for this information are found in Legal Notices