Hi,
We have a registry item that was created using a GPO, created a couple of years ago. It was to suppress certain events for Sophos Anti-Virus on all machines, and sits under:
HKLM:SYSTEM\CurrentControlSet\Services\SAVOnAccess
Looking in registry editor, administrators and SYSTEM both have full control over the key. Even I as a domain admin am shown as having full control when viewing effective access.
The problem is, if I, the administrator, "run as admin" or even a GPO, try to delete/modify/rename the key, we get a permission error.
Can anyone advise what else might be preventing even privileged accounts from modifying this key/item?
Thanks
James