IE settings over GPP get overwritten from SearchProtocolHost.exe

Hi,

We recently switched from Internet Explorer Maintenance Policies to Group Policy Preferences and now we have a strange issue.

We want to configure the setting => Internet Options => Security => Local intranet => sites the following way:


Therefore, I used process monitor to see what is changing the reg keys and got this result:


Now Im just really confusedHow and why is the SearchProtocolHost.exe changing the regkeys? 

Thank you!


July 6th, 2015 9:29am

Hi,

SearchProtocolHost.exe is part of the Windows Indexing Search Service. The process is constantly indexing files for faster searches and is designed to do this when the system is idle. Since I could not reproduce this issue (wont modified by SearchProtocolHost.exe). Its odd that this exe file modifies this registry entry. As a workaround we could try stopping this issue by changing permission of these values (this exe should run as SYSTEM account or Trustinstaller account) or stopping Windows search service from Services.msc.

Regards,

D. Wu

Free Windows Admin Tool Kit Click here and download it now
July 9th, 2015 9:03pm

Hi,

Thanks for your answer. I was doing a longer capture with process monitor today, and it seems like more .exe files are modifying the registry.

As you can see the svchost.exe is setting the keys correctly (was doing a gpudate), but other things are changing it back when launching IE or Word

I have really no clue where this is coming from. I understand that I could modify the permissions of the keys, but I would like to find the root cause of it.


July 16th, 2015 7:52am

Hi,

Thanks for your answer. I was doing a longer capture with process monitor today, and it seems like more .exe files are modifying the registry.

As you can see the svchost.exe is setting the keys correctly (was doing a gpudate), but other things are changing it back when launching IE or Word

I have really no clue where this is coming from. I understand that I could modify the permissions of the keys, but I would like to find the root cause of it.



  • Edited by St3fan_ 22 hours 8 minutes ago
Free Windows Admin Tool Kit Click here and download it now
July 16th, 2015 11:50am

Hi,

Thanks for your answer. I was doing a longer capture with process monitor today, and it seems like more .exe files are modifying the registry.

As you can see the svchost.exe is setting the keys correctly (was doing a gpudate), but other things are changing it back when launching IE or Word

I have really no clue where this is coming from. I understand that I could modify the permissions of the keys, but I would like to find the root cause of it.



  • Edited by St3fan_ Monday, July 20, 2015 9:16 AM
July 16th, 2015 11:50am

Hi,

The photo you attached doesnt show properly in forum, please attach it again. You also could share it with us by using one drive.

Regards,

D. Wu

Free Windows Admin Tool Kit Click here and download it now
July 19th, 2015 9:57pm

Hi,

thanks for that it is fixed now. But I had to split the picture in 3 parts. Looks like the resolution is too high as one.

July 20th, 2015 5:18am

Hi,

thanks for that it is fixed now. But I had to split the picture in 3 parts. Looks like the resolution is too high as one.

Free Windows Admin Tool Kit Click here and download it now
July 20th, 2015 9:17am

Sorry I meant that the photo is fixed, not my issue

July 21st, 2015 3:22am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics