Re: Reading Subkeys with Win32::TieRegistry (debug)

I've been unable to reproduce this. Could you please check what the permissions are on the EventLog/ key and the EventLog/Application/ key? (Transcribe the information from Edit->Permission->Advanced and tell me what user and groups you are accessing via.) Then include a dump of the return value from $key->Information(). Thanks.

- tye

Comment on Re: Reading Subkeys with Win32::TieRegistry (debug)

Replies are listed 'Best First'.
Re^2: Reading Subkeys with Win32::TieRegistry (debug) by Al_Gee (Initiate) on Feb 02, 2009 at 15:15 UTC
OK. I went and checked the information that you asked for. The permissions for both keys are the same, and the local Administrators group is set to Full Control. I am running the script as a member of that Administrators group. I went to the Advanced tab and checked the effective permissions for the user that is running the script. On both keys, it has Full Control. A dump of the return value from $key->Information() for the Eventlog key shows the following: CntSubKeys = 6 CntValues = 11 MaxSubClassLen = 0 SecurityLen = 260 MaxSubKeyLen = 12 MaxValNameLen = 19 LastWrite = 2009-01-21T20:51:34 MaxValDataLen = 27 The only thing that I can see different about the Eventlog key and any of the others (looking in regedit) is the setting for the first value in that key labeled "(Default)". For all of the other keys that I've looked at, that "Default" value is set to either a string (Application, for example, is set to "mnmsrvc") or "(value not set)". If I click on "Modify" the Eventlog "(Default)" looks empty just like the values for the keys that show "(value not set)". If, however, I click on "Modify Binary Data", the values for the keys that show "(value not set)" show "0000" and the value for "(Default)" on the Eventlog key shows "0000 00 00". I have no idea, if that is the problem, but it is the only difference that I can see... Does that answer all your questions? Thanks for your help. --Al	[reply]

Replies are listed 'Best First'.

Re^2: Reading Subkeys with Win32::TieRegistry (debug)
by Al_Gee (Initiate) on Feb 02, 2009 at 15:15 UTC

OK. I went and checked the information that you asked for. The permissions for both keys are the same, and the local Administrators group is set to Full Control. I am running the script as a member of that Administrators group. I went to the Advanced tab and checked the effective permissions for the user that is running the script. On both keys, it has Full Control.

A dump of the return value from $key->Information() for the Eventlog key shows the following:

CntSubKeys = 6
CntValues = 11
MaxSubClassLen = 0
SecurityLen = 260
MaxSubKeyLen = 12
MaxValNameLen = 19
LastWrite = 2009-01-21T20:51:34
MaxValDataLen = 27

The only thing that I can see different about the Eventlog key and any of the others (looking in regedit) is the setting for the first value in that key labeled "(Default)". For all of the other keys that I've looked at, that "Default" value is set to either a string (Application, for example, is set to "mnmsrvc") or "(value not set)". If I click on "Modify" the Eventlog "(Default)" looks empty just like the values for the keys that show "(value not set)". If, however, I click on "Modify Binary Data", the values for the keys that show "(value not set)" show "0000" and the value for "(Default)" on the Eventlog key shows "0000 00 00". I have no idea, if that is the problem, but it is the only difference that I can see...

Does that answer all your questions?

Thanks for your help.

--Al

[reply]