KB-9492: Citrix registry keys are cleared after uninstalling Suite 2014 Direct Audit agent on Windows

Home >

KB-9492: Citrix registry keys are cleared after uninstalling Suite 2014 Direct Audit agent on Windows

Product:

Centrify DirectAudit ,

Published:

22 November,17 at 09:35 AM

Rating:

Problem:

Uninstalling Centrify Suite 2014 Direct Audit agent on Windows will clear some of the registry keys of Citrix.

Before the uninstallation:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\PROGRA~2\\Citrix\\System32\\mfaphook64.dll "
"LoadAppInit_DLLs"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\PROGRA~2\\Citrix\\System32\\mfaphook.dll "
"LoadAppInit_DLLs"=dword:00000001

After the uninstallation:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"= <%This key value is being clear out>
"LoadAppInit_DLLs"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"= <%This key value is being clear out>
"LoadAppInit_DLLs"=dword:00000000

Cause:

This is a known issue that uninstalling Suite 2014 Windows DA agent or upgrading to Suite 2014 Windows DA agent will modify these keys.

Resolution:

There is a fix addressed in a Suite 2014.1 one-off as well as Suite 2015.

The end user has two options to fix this problem.

1. Upgrade to Suite 2014.1 one-off.
2. Upgrade all the DA components to Suite 2015 or later.

Note:
Please contact Centrify Support for the one-off package. And ensure the Citrix key values have been manually restored to the original before the upgrade.