Windows Resource Protection Registry Keys

AdminStudio 2022 | 23.0 | Application Manager

For this operating system compatibility test, the Windows Installer database is scanned for the presence of registry entries that are subject to Windows Resource Protection (WRP).

Test Group/Test Category

0316—Operating System Compatibility/Windows 8.1 (32-Bit)
0416—Operating System Compatibility/Windows 8.1 (64-Bit)
2816—Operating System Compatibility/Windows 10-1809 (and 2019 LTSC) (32-Bit)
5216—Operating System Compatibility/Windows 10-1909 (32-Bit)
5416—Operating System Compatibility/Windows 10-2004 (32-Bit)
5616—Operating System Compatibility/Windows 10-20H2 (32-Bit)
5816—Operating System Compatibility/Windows 10-21H1 (32-Bit)
7016—Operating System Compatibility/Windows 10-21H2 (32-Bit)
2916—Operating System Compatibility/Windows 10-1809 (and 2019 LTSC) (64-Bit)
5316—Operating System Compatibility/Windows 10-1909 (64-Bit)
5516—Operating System Compatibility/Windows 10-2004 (64-Bit)
5716—Operating System Compatibility/Windows 10-20H2 (64-Bit)
5916—Operating System Compatibility/Windows 10-21H1 (64-Bit)
7116—Operating System Compatibility/Windows 10-21H2 (64-Bit)
6716—Operating System Compatibility/Windows 11-21H2 (64-Bit)
0516—Operating System Compatibility/Windows Server 2012
0616—Operating System Compatibility/Windows Server 2016
1016—Operating System Compatibility/Windows Server 2019

Severity

Warning

Message

This Windows Installer database contains Windows Resource Protection registry entry [REGISTRY_KEY] (Table: Registry, Key: [REGISTRY_ENTRY]).

Background

On Windows Vista and later systems, WRP prevents the modification of essential system files, folders, and registry keys that are installed as part of the operating system. Protecting these resources prevents application and operating system failures. Accordingly, Windows Installer automatically and silently ignores attempts to write or modify a protected resource. If the application was installed with Windows Installer and logging was enabled, a warning might be logged for each registry key write operation that was ignored because of WRP. Starting with Windows 7, several additional registry keys are protected via Windows WRP. To preserve the installation process, Windows Installer might report success in changing these keys, even though the operation failed. If the application relies on particular settings in the now protected area, this strategy might result in run-time errors. WRP registry entries can be written only using Microsoft-provided redistributable packages that are designed for Windows 7 or later.

Resolution

The following resolutions are available.

Manual Fix

Affected registry entries should be assessed whether they are required for the application to run successfully on the specified Windows systems. If the registry entry is required, an application compatible with the specified Windows operating system should be delivered by its manufacturer. Self-developed applications should be re-engineered to respect WRP restrictions.

Basic Auto Fix

No resolution is available.

Advanced Auto Fix

WRP registry keys are removed in a Windows Installer transform.

This fix is enabled by default.

Caution:If the application relies on particular settings in the now protected area, this workaround might still result in run-time errors.

See Also