cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Windows Update KB3072630 causes Registry permission changes to HKCU to fail

Windows Update KB3072630 causes Registry permission changes to HKCU to fail

Summary

A hotfix is available: Windows update KB3072630 changed the way that custom actions in system context are allowed to interact with HKCU in order to resolve a vulnerability in Microsoft Windows: https://technet.microsoft.com/en-us/library/security/ms15-074.aspx

Symptoms

Windows update KB3072630 | MS15-074 changed the way that custom actions in system context are allowed to interact with HKCU in order to resolve a vulnerability in Microsoft Windows.

This change causes problems with custom actions that interact with HKEY_CURRENT_USER to read and write keys or set permissions from a system context. This includes attempting to change permissions on a registry key in HKCU using the Registry view of InstallShield. At runtime, this error can also appear as error 27555.

Also reference Microsoft Security Bulletin MS15-074

Steps To Reproduce

  1. Install KB3072630.
  2. Run an MSI that attempts to change permissions on a key within HKCU

Resolution

This issue has been resolved in InstallShield 2015 SP1. If you are using InstallShield 2015 and have not applied the Service Pack, it is recommended to upgrade to the Service Pack 1.

Additional Information

An InstallShield 2015 hotfix for this issue is attached.

To apply the fix, follow the steps below:
  • Close InstallShield and Visual Studio.
  • Based on product ?
    • Make a backup copy of:
C:\Program Files (x86)\InstallShield\2015\Redist\Language Independent\i386\IsLockPermissions.dll
And:
C:\Program Files (x86)\InstallShield\2015\Redist\Language Independent\x64\IsLockPermissions.dll
  • Make a backup copy of:
C:\Program Files (x86)\InstallShield\2015 SAB\Redist\Language Independent\i386\IsLockPermissions.dll
And:
C:\Program Files (x86)\InstallShield\2015 SAB\Redist\Language Independent\x64\IsLockPermissions.dll
  • Extract the folder structure to:
C:\Program Files (x86)\InstallShield\2015\Redist\Language Independent
Or:
C:\Program Files (x86)\InstallShield\2015 SAB\Redist\Language Independent
  • Confirm both IsLockPermissions.dll?s have been updated.
  • Rebuild your project.

Related KB Articles

InstallShield 2015 Known Issues
Was this article helpful? Yes No
No ratings
Version history
Last update:
‎Nov 14, 2018 11:48 PM
Updated by: