"Registry access denied". What keys?

[spino]

hello,
while scanning a server, part of an AD domain, I get "Registry access denied".
This happens also with the service running as a domain administrator.
Using regedit on the server, checked that domain admins do have full control permission over each registry branch.
Is there any way, or any useful information, to identify what registry leaf was denied access to?
thanks

[Hemoco]

Where exactly did you get the registry access denied?
Was it in the errorlog.txt?
Can you post the error part please.

[tuvita]

Lansweeper wrote:
Where exactly did you get the registry access denied?
Was it in the errorlog.txt?
Can you post the error part please.

website, client details, error tab: there's a line stating:

Regerror Requested registry access is not allowed. clientname (clientname) 2/6/2008 3:10:32 PM

errorlog.txt on the server is empty

[Hemoco]

You can ignore the buffer overflow.
Did you run procmon on the server or on the client?
You should run it on the server when the server tries to scan the client.

[tuvita]

Lansweeper wrote:
You can ignore the buffer overflow.
Did you run procmon on the server or on the client?
You should run it on the server when the server tries to scan the client.

ops, I did it on the workstation to be scanned.
I tried now to issue a "trigger scan" command from the website.
on the server, process lansweeper30 makes operations on
\\targetpc\PIPE\winreg and on
\\targetpc\IPC$\winreg .
All operation are "success". No other operations are tracked for process lansweeper30.exe.

[Hemoco]

download the free tool "procmon" (process monitor) from http://www.sysinternals.com
This will give a complete trace of what's going on. (you can easily find all access denieds)

[tuvita]

Lansweeper wrote:
download the free tool "procmon" (process monitor) from http://www.sysinternals.com
This will give a complete trace of what's going on. (you can easily find all access denieds)

There's no "access denied errors".
I see a number of "not found" errors, which I expect to be correct.
Then a mumber of "buffer overflow" errors while opening keys. maybe this is misinterpreted as "access denied"?