Registry key- branch

the ownership was already to the admin group, and am logged in as admin. still i am not able to delete the key. I tried deleting the subkeys and i got rid of all of them except the default subkey, but still not able to delete. (attached screen shots)

thanks

Shift-3
could you please see why i have given read permissions, still not able to delete?
default.bmp
perm.bmp
regkey.bmp

Have you tried deleting it while in safe mode? Also, for fun, take ownership of the key as yourself.

Crolack
this is a live exchange server. hence i hesitate to reboot without maintenance notice for the safe mode option on server 2003 box.

is there a way to find which process/software is holding this key?

i am logged as admin and the admin is the owner of this key..

thanks

Try running Process Explorer and searching on the key name.

thanks for the PE reco. But it is giving access errors. Windows Firewall is disabled. kindly advice.

also will this tool tell if this key a corrupt one or a key with null characters? thanks
procexp.jpg

I am able to get into the program now:

are you referring to":FInd Handle or DLL"? I put the key code there but that did not bring anything.

thanks

Thanks for listing out the steps.
For points 3 & 9 it is complaining access is denied (the ownership is already correct and point 7 is already correct)

I also followed the steps in the document but it didn't help.

Thanks.

Can you perform the same task on the individual items under the key itself?

right now I have deleted all the subkeys, except the 'default' one..

the default one is stubborn..

there is a tab called "effective permissions" under Advanced option. But it is greyed out. Does it have any relation to the issue at hand?

thanks

If its grayed out you dont have the correct permissions.

Did you follow the procedure for the sub key?

good point, I had not done the detailed steps for the subkeys.. they just got deleted easily..

I checked a good reg key's 'effective permissions' tab, and it is also greyed out..

thanks