Changed key (time) (Windows)

Module: Registry

Supported Platforms: Windows 2000, Windows 2003, Windows 2008, Windows Vista, Windows XP

This option reports registry keys that changed, according to the last write time, after the last snapshot update. The Check Time check box in the associated template record must be checked.

The following table lists the error message for the check.

Table: Error message for Changed key (time)

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESM_KEY_LAST_WRITE

Category: System Information

  • Windows 2000 (106730)

  • Windows 2003 (206730)

  • Windows 2008 (249730)

  • Windows Vista (229730)

  • Windows XP (201730)

Title: Registry key last write time has changed

Description:The registry key's last write time changed after the last snapshot update. If the change is authorized, update the snapshot file. If the change is not authorized, restore the registry key to its previous state.

Severity: yellow-1

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [Last write time: %s; expected: %s; comment: %s]