About EPS Protected Registry Keys

Version 3

    Verified Product Versions

    LANDESK Management Suite 9.6

    Description

    LANDESK  Endpoint Security/HIPS protects certain registry keys from modification. This document lists the registry keys that are protected by the HIPS process.

     

    Resolution

    LANDESK HIPS protects the following registry keys on the client:

     

    REGISTRY\MACHINE\SOFTWARE\CLASSES\.EXE

    REGISTRY\MACHINE\SOFTWARE\CLASSES\EXEFILE

    REGISTRY\MACHINE\Software\Classes\PROTOCOLS\Filter\*

    REGISTRY\MACHINE\SOFTWARE\LANDESK

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\CustomizeSearch

    REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Extensions\*

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\CustomizeSearch

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Page_URL

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Local Page

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Local Page

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Page

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\SearchAssistant

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\www

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\*

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchAssitant

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchURL

    REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Toolbar\*

    REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\*

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\www

    REGISTRY\MACHINE\SOFTWARE\Microsoft\InternetExplorer\Main\Default_Search_URL

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\don’t load\*

    REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\*

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\PINF

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoBrowserClose

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoBrowserOptions

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWindowsUpdate

    REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispCpl

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispScrSavPage

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispScrSettingsPage

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispSettingsPage

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Shell

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Uninstall\NoAddRemovePrograms

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad

    REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\*

    REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\Advanced

    REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\AdvancedTab

    REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\Certificates

    REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\ContentTab

    REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\GeneralTab

    REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\HomePage

    REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\Privacy Settings

    REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\PrivacyTab

    REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\ProgramsTab

    REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\Proxy

    REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\ResetWebSettings

    REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\SecurityTab

    REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\Settings

    REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserClose

    REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserOptions

    REGISTRY\MACHINE\SYSTEM\CurrentControlSet\*\LDSecDrv

    REGISTRY\MACHINE\SYSTEM\CurrentControlSet\*\LDSecSvc

    REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager

    REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\BootExecute

    REGISTRY\ROOT\PROTOCOLS\Filter\*

    REGISTRY\USER\*\Control Panel\don’t load\*

    REGISTRY\USER\*\ProdRegKey

    REGISTRY\USER\*\SOFTWARE\Microsoft\Internet Explorer\AboutURLs

    REGISTRY\USER\*\SOFTWARE\Microsoft\Internet Explorer\CustomizeSearch

    REGISTRY\USER\*\SOFTWARE\Microsoft\Internet Explorer\Main\CustomizeSearch

    REGISTRY\USER\*\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Page_URL

    REGISTRY\USER\*\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Search_URL

    REGISTRY\USER\*\SOFTWARE\Microsoft\Internet Explorer\Main\Local Page

    REGISTRY\USER\*\SOFTWARE\Microsoft\Internet Explorer\Main\Local Page

    REGISTRY\USER\*\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar

    REGISTRY\USER\*\SOFTWARE\Microsoft\Internet Explorer\Main\Search Page

    REGISTRY\USER\*\SOFTWARE\Microsoft\Internet Explorer\Main\SearchAssistant

    REGISTRY\USER\*\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page

    REGISTRY\USER\*\SOFTWARE\Microsoft\Internet Explorer\Main\www

    REGISTRY\USER\*\SOFTWARE\Microsoft\Internet Explorer\Search\*

    REGISTRY\USER\*\SOFTWARE\Microsoft\Internet Explorer\SearchAssitant

    REGISTRY\USER\*\SOFTWARE\Microsoft\Internet Explorer\SearchURL

    REGISTRY\USER\*\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\*

    REGISTRY\USER\*\Software\Microsoft\Internet Explorer\URLSearchHooks\*

    REGISTRY\USER\*\SOFTWARE\Microsoft\Internet Explorer\www

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoBrowserClose

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoBrowserOptions

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWindowsUpdate

    REGISTRY\USER\*\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispCpl

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispScrSavPage

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispScrSettingsPage

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispSettingsPage

    REGISTRY\USER\*\Software\Microsoft\Windows\CurrentVersion\Policies\System\Shell

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Uninstall\NoAddRemovePrograms

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

    REGISTRY\USER\*\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce

    REGISTRY\USER\*\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\Advanced

    REGISTRY\USER\*\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\AdvancedTab

    REGISTRY\USER\*\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\Certificates

    REGISTRY\USER\*\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\ContentTab

    REGISTRY\USER\*\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\GeneralTab

    REGISTRY\USER\*\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\HomePage

    REGISTRY\USER\*\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\Privacy Settings

    REGISTRY\USER\*\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\PrivacyTab

    REGISTRY\USER\*\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\ProgramsTab

    REGISTRY\USER\*\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\Proxy

    REGISTRY\USER\*\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\ResetWebSettings

    REGISTRY\USER\*\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\SecurityTab

    REGISTRY\USER\*\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\Settings

    REGISTRY\USER\*\SOFTWARE\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserClose

    REGISTRY\USER\*\SOFTWARE\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserOptions