最近修改了HKCR,应用了使用可从此对象继承的权限项目替换所有子对象的权限项目。
backgroundTaskHost.exe的RegOpenKey(HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders)失败,但目录有权限。
PM发现backgroundTaskHost.exe访问注册表有异常。
要么是ACCESS DENIED、要么是NAME NOT FOUND(或者REPARSE),(前两者)都视为失败。
失败的位置/路径如:
RegOpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders(RegCreateKey、RegOpenKey)
HKCU\Control Panel\Desktop\LanguageConfiguration
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize
HKCU\Control Panel\Desktop
HKCU\Control Panel\Desktop\LanguageConfiguration
HKCU\Control Panel\International\User Profile
HKCU\Software(RegCreateKey)
有成功的(路径):
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\Microsoft.Windows.Cortana_cw5n1h2txyewy
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Windows.Cortana_cw5n1h2txyewy\PSR
HKCU\Software\Classes
HKCU\Software\Classes\ActivatableClasses\Package\Microsoft.Windows.Cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy
主要,HKCU\Software\Classes正常,HKCU\Software、HKCU\Control Panel异常,权限页,后者多出S-1-15-3-1024-用户,异常的在于用户权限来自继承。
尝试在下游项上,禁用继承,将已继承的权限转换为此对象的显式权限。