Was just wondering how you went about tracking faults in particular applications using Regmon......like what to use in the filters, what fields to check, meaning of status messages (especially the "not found" one....it doesn't seem to mean that the application WONT run...????!!!!)
Basically I was hoping to use Regmon to help identify a fault with an applicaion that sometimes will run and sometimes not....???? I have noticed that the Citrix Compatibility key reports as "Not Found".....does this mean that the App is not compatible for a Citrix environment...??? If so, why does it still run sometimes...????
Yeah, the user thing is a problem....???? Didn't expect so many keys to be accessed...!!!!
No there are many MANY "NOT FOUNDS" in regmon. do not pay attention to this fault. if i use regmon i export it to a txt file. open it with notepad an search for "DENIED" or something. If this key is there you shoul look in regedt32.
In regedt32 find the key that said acc denied. look what the permissions are on that key...
You can open Regmon or Filemon logs in Excel (or your favourite spreadsheet program) as CSV files, then use the Data Sort facility to find all ACCESS DENIEDs or similar (obviously we are not interested in SUCCESS!).
Saves an awful lot of trawling, and acts as a filter, of sorts.
Yeah, I have "trapped" the registry access from Regmon for both the program opening successfully and failing, trying to look through the data I have trapped to see where it is failing....!!!! There are no obvious "Access Denied" messages so I'm just trying to see any differences in the Regmon captures......
Yeah, I was sort of hoping that it was Permissions....
Anyway its a program called Masterbill, it uses a product Deskey as its "transport" between Client/Server (I think Deskey provides some sort of encryption..???)
I've had a quick look at the captures from regmon...I'll need to verify this but it looks like when a successful "connection" is made that the registry is passing the Citrix server name when querying certain values, when it fails to start it looks like it passes a hex value at the same points....????
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.