Can not modify registry key from LSA folder

Md. Rubiat Haque 146 Reputation points
2022-06-29T10:02:48.857+00:00

Hi,

I am facing an issue. My security team found a vulnerability and they provided me to mitigate this.
I found a solution to mitigate this. Here is the link where I found the solution

https://dirteam.com/sander/2021/09/22/hardening-smb-on-domain-controllers-step-3-disabling-smb-null-sessions/

When I want to deploy it via powershell, I got an error registry access is denied. I tried to modify the registry value from registry editor but facing same access issue. I was googling and some blogs told that it's a permission issue. When I go to assign permission I can't do this and also got the same access denied error when try to assigned user in permission. I tried to modify another registry value and I could edit all values easily without facing any error but only in LSA folder, I can not modify any value.
After some analysis, I found that all application packages is exist in permissions of all registry folders except LSA. So, now my concern is how to assign all application packages. Please suggest me. It has become a big issue now. Thanks in Advance.

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,454 questions
Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,370 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,844 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. rr-4098 1,176 Reputation points
    2022-07-02T08:34:12.483+00:00

    Are you running Powershell as "Administrator" when you open the application?

    0 comments
  2. Limitless Technology 39,351 Reputation points
    2022-07-03T09:13:46.477+00:00

    Hi there,

    Some keys are protected by a trusted installer. You have to set yourself as the owner of the key first and give yourself full writing permissions.

    Regedit, select your key, right-click-->Permissions-->Advanced-->Owner, select Administrators, Apply. Then grant full control to "System", and, if you like, to "Administrators" also.

    The below thread discusses the same issue and you can try out some troubleshooting steps from this and see if that helps you to sort the Issue.

    https://social.technet.microsoft.com/Forums/en-US/56fed319-a532-46a4-a384-fd795998c4a3/regedit-permissions-quotaccess-deniedquot-or-quoterror-while-deleting-keyquot-even-as?forum=w7itproinstall

    -------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept it as an answer–

    0 comments