I use ePO 184.108.40.206 on windows 2008 r2 and installed several mcafee agents 220.127.116.111 on clients with windows xp sp3. I also installed and enabled solidcore client 18.104.22.1689.
Then I tried to enable blocking several registry keys. I configured change control policy and added the registry key on the "write protect registry" tab. Then I assigned this policy to the system.
And I'v got a strange result - in some cases registry key is blocked, so if try to edit it I get error massage, but in some cases didn't.
For example if I add HKEY_LOCAL_SYSTEM\SYSTEM\CurrentControlSet\Enum at the "write protect registry" tab in the policy I can successfully add new key to HKEY_LOCAL_SYSTEM\SYSTEM\CurrentControlSet\Enum on the client. But for example if I add HKEY_LOCAL_SYSTEM\SYSTEM or HKEY_LOCAL_SYSTEM\SYSTEM\CurrentControlSet then I can't add new key to HKEY_LOCAL_SYSTEM\SYSTEM or HKEY_LOCAL_SYSTEM\SYSTEM\CurrentControlSet correspondingly - I get a error message.