BUG: RegCreateKeyEx May Fail When Using REG_OPTION_BACKUP_RESTORE

Article ID: 257176 - View products that this article applies to.
This article was previously published under Q257176
Expand all | Collapse all

SYMPTOMS

A user within the Backup Operators group may not be able to create a key by using the RegCreateKeyEx function with the REG_OPTION_BACKUP_RESTORE flag, even though the "Restore files and directories" (SE_RESTORE_NAME) privilege is granted and enabled.

CAUSE

If the SE_RESTORE_NAME privilege has been enabled and the parent key is opened by using the REG_OPTION_BACKUP_RESTORE flag, the parent key should be opened with KEY_WRITE access, which includes KEY_CREATE_SUB_KEY access. However, a bug in the operating system prevents the parent key from being opened with KEY_CREATE_SUB_KEY access, unless the user explicitly has KEY_CREATE_SUB_KEY access to that parent key. As a result, the call to create the subkey fails with error code 5 (ERROR_ACCESS_DENIED).

STATUS

Microsoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article.

Properties

Article ID: 257176 - Last Review: November 21, 2006 - Revision: 4.3
APPLIES TO
  • Microsoft Win32 Application Programming Interface, when used with:
    • the operating system: Microsoft Windows 2000
Keywords: 
kbbug kbkernbase kbpending kbregistry KB257176

Give Feedback