Symptoms

A patch scan fails with the error:

Error 501 - Remote registry access denied 

Cause

This issue occurs if there is a network or configuration issue which prevents Protect from connecting remotely to the target machine's registry.

Resolution  

To resolve this issue:

1. Ensure that the Remote Registry service is started on the target machine(s). 
2. If you are able to log in to the machine from which you are running the scan as a user with administrative rights to a target machine, test the remote registry access.
   
   To test the remote registry access:
   1. Click Start> Run, type regedit, and click OK. The Registry Editor window opens. 
   2. Click File> Connect Network Registry. 
   3. Enter the name of the target machine as the object name and verify if you can connect and navigate to the remote registry of that machine.
3. In the target machine(s), navigate to the HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurePipeServers\winreg registry key, add \"LOCAL SERVICE\" to the key, and give it the READ access.

If the preceding steps do not resolve the issue, it is possible that the policy setting is limiting access to the remote registry of the target machine(s). To resolve this issue, contact your network administrator.

Additional Information

For more information on managing remote access to the registry, see the Microsoft Knowledge Base article 314837.

Affected Product(s)

Shavlik Protect 9.x