3 Replies Latest reply on May 19, 2015 11:31 AM by wwarren

    Protect Internet Explorer favorites and settings

    mkissel

      Is anyone seeing an lot of abnormal blocks by having this enabled lately. It is blocking Microsoft mouse and keyboard center, and it is very noisy during third party updates.

        • 1. Re: Protect Internet Explorer favorites and settings
          wwarren

          Would you mind sharing some recent AP log entries that show the activity? (You can scrub the username details if need be)

           

          What I'm most curious about is what process we are tagging as being responsible for the activity, especially when you say the Microsoft mouse and keyboard center might be that entity.

          Makes you wonder why such an app would care about your IE settings.

           

          Whatever the case, you have to recognize that Access Protection does not "false", so whatever that process is, it really is accessing the protected settings and trying to do so with enough privileges to change them, not just read them. Meaning, if you want to stop the noise you have to exclude the process or disable the reporting of the rule.

          • 2. Re: Protect Internet Explorer favorites and settings
            mkissel
            Blocked by Access Protection rulec:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe\REGISTRY\USER\S-1-5-21-1129609126-404639183-60295696-18202\Software\Microsoft\W indows\CurrentVersion\Internet Settings\ZoneMap\AutoDetectAnti-spyware Standard Protection:Protect Internet Explorer favorites and settingsAction blocked : Create
            5/19/20159:08:29 AMBlocked by Access Protection rulec:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe\REGISTRY\USER\S-1-5-21-1129609126-404639183-60295696-18202\Software\Microsoft\W indows\CurrentVersion\Internet Settings\ZoneMap\AutoDetectAnti-spyware Standard Protection:Protect Internet Explorer favorites and settingsAction blocked : Create
            5/19/20159:08:29 AMBlocked by Access Protection rulec:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe\REGISTRY\USER\S-1-5-21-1129609126-404639183-60295696-18202\Software\Microsoft\W indows\CurrentVersion\Internet Settings\ZoneMap\AutoDetectAnti-spyware Standard Protection:Protect Internet Explorer favorites and settingsAction blocked : Create
            5/19/20159:08:29 AMBlocked by Access Protection rulec:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe\REGISTRY\USER\S-1-5-21-1129609126-404639183-60295696-18202\Software\Microsoft\W indows\CurrentVersion\Internet Settings\ZoneMap\AutoDetectAnti-spyware Standard Protection:Protect Internet Explorer favorites and settingsAction blocked : Create

            This is just one example of things that are staring to get blocked by this rule.

            • 3. Re: Protect Internet Explorer favorites and settings
              wwarren

              You should be safe in this case for adding the affected processes to the "Processes to exclude" list of that AP rule.

              Either the process name or the full path + process name, should work out for you.

              e.g.

              itype.exe, c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe