Adobe Reader X 10.1.3 - Occasionally one of our users gets:

There is a problem with Adobe Acrobat/Reader.  If it is running, please exit & try again. (103:103).

When trying to load a .PDF.. from my research appears as though "Protected Mode" is to blame, i've set logging, and have this massive 700+KB log file here, not really sure if it's relevant.

This user is NOT a power user or administrator, only has user rights and thats it. UAC is on.

Win7 x86 32bit Enterprise.

Although the issue is so infrequent it is difficult to tell, apparently these faults do NOT occur when protected mode is turned off.

I cannot find anywhere to attach this log so...pasting it here: (too large for pastebin : ( )

[06:27/15:51:07] Adobe Reader Protected Mode Logging Initiated

[06:27/15:51:07] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:51:07] real path: \REGISTRY\MACHINE\Software\Adobe

[06:27/15:51:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:51:07] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:51:07] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:27/15:51:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:51:08] OpenEvent: STATUS_ACCESS_DENIED

[06:27/15:51:08] name: MSFT.VSA.COM.DISABLE.7492

[06:27/15:51:08] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:27/15:51:08] OpenEvent: STATUS_ACCESS_DENIED

[06:27/15:51:08] name: MSFT.VSA.IEC.STATUS.6c736db0

[06:27/15:51:08] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:27/15:55:22] Adobe Reader Protected Mode Logging Initiated

[06:27/15:55:22] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:22] real path: \REGISTRY\MACHINE\Software\Adobe

[06:27/15:55:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:22] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:22] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:27/15:55:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:22] NtCreateMutant: STATUS_ACCESS_DENIED

[06:27/15:55:22] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[06:27/15:55:22] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[06:27/15:55:22] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:22] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[06:27/15:55:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:22] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:22] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[06:27/15:55:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:22] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/15:55:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:22] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/15:55:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:22] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/15:55:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:22] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/15:55:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:22] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/15:55:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:22] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/15:55:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:22] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/15:55:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:22] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/15:55:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:22] OpenEvent: STATUS_ACCESS_DENIED

[06:27/15:55:22] name: Global\BFE_Notify_Event_{6002853c-bf24-46a2-a9f7-57845b13487b}

[06:27/15:55:22] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:27/15:55:23] NtCreateMutant: STATUS_ACCESS_DENIED

[06:27/15:55:23] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[06:27/15:55:23] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[06:27/15:55:23] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:23] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[06:27/15:55:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:23] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:23] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[06:27/15:55:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:24] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:24] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[06:27/15:55:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:24] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:24] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[06:27/15:55:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:24] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:24] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[06:27/15:55:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:24] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:24] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[06:27/15:55:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:24] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/15:55:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:24] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/15:55:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:24] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/15:55:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/15:55:24] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/15:55:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/15:55:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/16:40:34] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/16:40:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/16:40:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/16:40:34] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/16:40:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/16:40:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/16:40:34] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/16:40:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/16:40:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/16:40:34] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/16:40:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/16:40:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/16:40:34] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/16:40:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/16:40:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/16:40:34] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/16:40:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/16:40:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/16:40:34] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/16:40:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/16:40:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/16:40:34] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/16:40:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/16:40:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/16:40:34] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/16:40:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/16:40:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/16:40:34] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/16:40:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/16:40:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/16:40:34] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/16:40:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/16:40:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/16:40:34] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/16:40:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/16:40:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/16:40:34] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/16:40:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/16:40:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/16:40:34] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/16:40:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/16:40:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/16:40:34] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/16:40:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/16:40:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:27/16:40:34] NtCreateKey: STATUS_ACCESS_DENIED

[06:27/16:40:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:27/16:40:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:28/08:37:37] Adobe Reader Protected Mode Logging Initiated

[06:28/08:37:39] NtCreateKey: STATUS_ACCESS_DENIED

[06:28/08:37:39] real path: \REGISTRY\MACHINE\Software\Adobe

[06:28/08:37:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:28/08:37:39] NtCreateKey: STATUS_ACCESS_DENIED

[06:28/08:37:39] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:28/08:37:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:28/08:37:47] Adobe Reader Protected Mode Logging Initiated

[06:28/08:37:47] NtCreateKey: STATUS_ACCESS_DENIED

[06:28/08:37:47] real path: \REGISTRY\MACHINE\Software\Adobe

[06:28/08:37:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:28/08:37:47] NtCreateKey: STATUS_ACCESS_DENIED

[06:28/08:37:47] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:28/08:37:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:28/09:45:03] Adobe Reader Protected Mode Logging Initiated

[06:28/09:45:03] NtCreateKey: STATUS_ACCESS_DENIED

[06:28/09:45:03] real path: \REGISTRY\MACHINE\Software\Adobe

[06:28/09:45:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:28/09:45:03] NtCreateKey: STATUS_ACCESS_DENIED

[06:28/09:45:03] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:28/09:45:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:28/12:14:05] Adobe Reader Protected Mode Logging Initiated

[06:28/12:14:05] NtCreateKey: STATUS_ACCESS_DENIED

[06:28/12:14:05] real path: \REGISTRY\MACHINE\Software\Adobe

[06:28/12:14:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:28/12:14:05] NtCreateKey: STATUS_ACCESS_DENIED

[06:28/12:14:05] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:28/12:14:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:28/12:20:58] Adobe Reader Protected Mode Logging Initiated

[06:28/12:20:58] NtCreateKey: STATUS_ACCESS_DENIED

[06:28/12:20:58] real path: \REGISTRY\MACHINE\Software\Adobe

[06:28/12:20:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:28/12:20:58] NtCreateKey: STATUS_ACCESS_DENIED

[06:28/12:20:58] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:28/12:20:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:28/12:20:59] OpenEvent: STATUS_ACCESS_DENIED

[06:28/12:20:59] name: MSFT.VSA.COM.DISABLE.1188

[06:28/12:20:59] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:28/12:20:59] OpenEvent: STATUS_ACCESS_DENIED

[06:28/12:20:59] name: MSFT.VSA.IEC.STATUS.6c736db0

[06:28/12:20:59] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:28/16:13:39] Adobe Reader Protected Mode Logging Initiated

[06:28/16:13:39] NtCreateKey: STATUS_ACCESS_DENIED

[06:28/16:13:39] real path: \REGISTRY\MACHINE\Software\Adobe

[06:28/16:13:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:28/16:13:39] NtCreateKey: STATUS_ACCESS_DENIED

[06:28/16:13:39] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:28/16:13:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:28/16:13:39] OpenEvent: STATUS_ACCESS_DENIED

[06:28/16:13:39] name: MSFT.VSA.COM.DISABLE.4912

[06:28/16:13:39] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:28/16:13:39] OpenEvent: STATUS_ACCESS_DENIED

[06:28/16:13:39] name: MSFT.VSA.IEC.STATUS.6c736db0

[06:28/16:13:39] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:29/08:41:12] Adobe Reader Protected Mode Logging Initiated

[06:29/08:41:12] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/08:41:12] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/08:41:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/08:41:12] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/08:41:12] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/08:41:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/10:51:42] Adobe Reader Protected Mode Logging Initiated

[06:29/10:51:42] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/10:51:42] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/10:51:42] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/10:51:42] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/10:51:42] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/10:51:42] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:52] Adobe Reader Protected Mode Logging Initiated

[06:29/11:17:52] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:52] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/11:17:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:52] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:52] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/11:17:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:52] NtCreateMutant: STATUS_ACCESS_DENIED

[06:29/11:17:52] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[06:29/11:17:52] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[06:29/11:17:52] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:52] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[06:29/11:17:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:52] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:52] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[06:29/11:17:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:53] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:17:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:53] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:17:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:53] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:17:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:53] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:17:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:54] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:54] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:17:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:54] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:54] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:17:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:54] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:54] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:17:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:54] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:54] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:17:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:54] OpenEvent: STATUS_ACCESS_DENIED

[06:29/11:17:54] name: Global\BFE_Notify_Event_{9f5288bc-5a50-4de7-83ce-25ab9b0f08fb}

[06:29/11:17:54] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:29/11:17:57] NtCreateMutant: STATUS_ACCESS_DENIED

[06:29/11:17:57] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[06:29/11:17:57] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[06:29/11:17:57] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:57] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[06:29/11:17:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:57] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:57] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[06:29/11:17:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:57] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:57] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[06:29/11:17:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:57] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:57] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[06:29/11:17:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:57] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:57] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[06:29/11:17:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:57] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:57] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[06:29/11:17:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:58] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:17:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:58] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:17:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:58] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:17:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:17:58] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:17:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:17:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:22:01] Adobe Reader Protected Mode Logging Initiated

[06:29/11:22:02] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:22:02] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/11:22:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:22:02] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:22:02] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/11:22:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:30:29] Adobe Reader Protected Mode Logging Initiated

[06:29/11:30:29] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:30:29] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/11:30:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:30:29] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:30:29] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/11:30:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:35:17] Adobe Reader Protected Mode Logging Initiated

[06:29/11:35:17] Adobe Reader Protected Mode Logging Initiated

[06:29/11:35:17] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:35:17] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/11:35:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:35:17] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:35:17] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/11:35:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:35:17] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:35:17] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/11:35:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:35:17] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:35:17] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/11:35:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:35:17] OpenEvent: STATUS_ACCESS_DENIED

[06:29/11:35:17] name: MSFT.VSA.COM.DISABLE.6028

[06:29/11:35:17] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:29/11:35:17] OpenEvent: STATUS_ACCESS_DENIED

[06:29/11:35:17] name: MSFT.VSA.IEC.STATUS.6c736db0

[06:29/11:35:17] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:29/11:35:17] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:35:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:35:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:35:17] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:35:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:35:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:35:17] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:35:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:35:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:35:17] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:35:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:35:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:35:18] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:35:18] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:35:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:35:18] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:35:18] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:35:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:35:18] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:35:18] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:35:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/11:35:18] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/11:35:18] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/11:35:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:09] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:09] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:09] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:09] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:09] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:09] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:09] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:09] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:16] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:16] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:16] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:16] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:16] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:16] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:16] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:16] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:16] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:16] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:16] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:16] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:16] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:16] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:16] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:03:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:03:16] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:03:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:12:16] Adobe Reader Protected Mode Logging Initiated

[06:29/12:12:16] Adobe Reader Protected Mode Logging Initiated

[06:29/12:12:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:12:16] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/12:12:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:12:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:12:16] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/12:12:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:12:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:12:16] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/12:12:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:12:16] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:12:16] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/12:12:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:12:16] OpenEvent: STATUS_ACCESS_DENIED

[06:29/12:12:16] name: MSFT.VSA.COM.DISABLE.6600

[06:29/12:12:16] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:29/12:12:16] OpenEvent: STATUS_ACCESS_DENIED

[06:29/12:12:16] name: MSFT.VSA.IEC.STATUS.6c736db0

[06:29/12:12:16] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:29/12:17:00] Adobe Reader Protected Mode Logging Initiated

[06:29/12:17:00] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:00] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/12:17:00] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:00] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:00] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/12:17:00] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:01] NtCreateMutant: STATUS_ACCESS_DENIED

[06:29/12:17:01] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[06:29/12:17:01] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[06:29/12:17:01] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:01] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[06:29/12:17:01] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:01] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:01] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[06:29/12:17:01] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:01] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:01] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:17:01] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:01] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:01] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:17:01] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:01] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:01] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:17:01] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:01] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:01] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:17:01] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:02] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:17:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:02] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:17:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:02] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:17:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:02] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:17:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:02] OpenEvent: STATUS_ACCESS_DENIED

[06:29/12:17:02] name: Global\BFE_Notify_Event_{c2025995-b3ad-42aa-833a-eb5555d3d2d0}

[06:29/12:17:02] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:29/12:17:02] NtCreateMutant: STATUS_ACCESS_DENIED

[06:29/12:17:02] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[06:29/12:17:02] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[06:29/12:17:02] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:02] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[06:29/12:17:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:02] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:02] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[06:29/12:17:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:02] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:02] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[06:29/12:17:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:02] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:02] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[06:29/12:17:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:02] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:02] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[06:29/12:17:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:02] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:02] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[06:29/12:17:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:03] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:17:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:03] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:17:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:03] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:17:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:17:03] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:17:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:17:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:19:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:19:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:19:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:19:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:19:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:19:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:19:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:19:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:19:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:19:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:19:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:19:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:19:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:19:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:19:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:19:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:19:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:19:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:19:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:19:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:19:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:19:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:19:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:19:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:19:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:19:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:19:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:19:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:19:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:19:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:19:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:19:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:19:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:19:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:19:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:19:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:19:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:19:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:19:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:19:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:19:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:19:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:19:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:19:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:19:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/12:19:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/12:19:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/12:19:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/13:22:48] Adobe Reader Protected Mode Logging Initiated

[06:29/13:22:48] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/13:22:48] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/13:22:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/13:22:48] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/13:22:48] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/13:22:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/13:53:38] Adobe Reader Protected Mode Logging Initiated

[06:29/13:53:39] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/13:53:39] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/13:53:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/13:53:39] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/13:53:39] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/13:53:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/13:53:39] OpenEvent: STATUS_ACCESS_DENIED

[06:29/13:53:39] name: MSFT.VSA.COM.DISABLE.8112

[06:29/13:53:39] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:29/13:53:39] OpenEvent: STATUS_ACCESS_DENIED

[06:29/13:53:39] name: MSFT.VSA.IEC.STATUS.6c736db0

[06:29/13:53:39] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:29/14:58:39] Adobe Reader Protected Mode Logging Initiated

[06:29/14:58:39] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/14:58:39] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/14:58:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/14:58:39] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/14:58:39] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/14:58:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/14:58:39] OpenEvent: STATUS_ACCESS_DENIED

[06:29/14:58:39] name: MSFT.VSA.COM.DISABLE.3992

[06:29/14:58:39] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:29/14:58:39] OpenEvent: STATUS_ACCESS_DENIED

[06:29/14:58:39] name: MSFT.VSA.IEC.STATUS.6c736db0

[06:29/14:58:39] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:29/15:09:24] Adobe Reader Protected Mode Logging Initiated

[06:29/15:09:24] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:09:24] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/15:09:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:09:24] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:09:24] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/15:09:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:09:25] OpenEvent: STATUS_ACCESS_DENIED

[06:29/15:09:25] name: MSFT.VSA.COM.DISABLE.5728

[06:29/15:09:25] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:29/15:09:25] OpenEvent: STATUS_ACCESS_DENIED

[06:29/15:09:25] name: MSFT.VSA.IEC.STATUS.6c736db0

[06:29/15:09:25] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:29/15:27:20] Adobe Reader Protected Mode Logging Initiated

[06:29/15:27:20] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:27:20] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/15:27:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:27:20] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:27:20] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/15:27:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:04] Adobe Reader Protected Mode Logging Initiated

[06:29/15:32:04] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:04] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/15:32:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:04] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:04] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/15:32:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:04] NtCreateMutant: STATUS_ACCESS_DENIED

[06:29/15:32:04] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[06:29/15:32:04] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[06:29/15:32:04] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:04] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[06:29/15:32:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:04] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:04] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[06:29/15:32:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:42] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:42] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:32:42] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:42] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:42] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:32:42] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:42] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:42] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:32:42] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:42] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:42] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:32:42] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:43] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:43] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:32:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:43] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:43] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:32:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:43] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:43] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:32:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:43] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:43] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:32:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:43] OpenEvent: STATUS_ACCESS_DENIED

[06:29/15:32:43] name: Global\BFE_Notify_Event_{a6573ac2-d24b-4f8b-b885-df019b5e211e}

[06:29/15:32:43] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:29/15:32:43] NtCreateMutant: STATUS_ACCESS_DENIED

[06:29/15:32:43] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[06:29/15:32:43] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[06:29/15:32:43] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:43] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[06:29/15:32:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:43] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:43] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[06:29/15:32:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:43] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:43] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[06:29/15:32:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:43] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:43] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[06:29/15:32:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:43] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:43] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[06:29/15:32:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:43] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:43] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[06:29/15:32:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:45] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:45] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:32:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:45] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:45] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:32:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:45] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:45] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:32:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:32:45] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:32:45] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:32:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:33:36] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:33:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:33:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:33:36] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:33:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:33:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:33:36] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:33:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:33:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:33:36] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:33:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:33:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:33:36] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:33:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:33:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:33:36] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:33:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:33:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:33:36] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:33:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:33:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:33:36] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:33:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:33:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:33:36] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:33:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:33:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:33:36] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:33:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:33:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:33:36] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:33:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:33:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:33:36] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:33:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:33:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:33:36] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:33:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:33:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:33:36] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:33:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:33:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:33:36] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:33:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:33:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/15:33:36] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/15:33:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/15:33:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/17:16:08] Adobe Reader Protected Mode Logging Initiated

[06:29/17:16:08] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/17:16:08] real path: \REGISTRY\MACHINE\Software\Adobe

[06:29/17:16:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/17:16:08] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/17:16:08] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[06:29/17:16:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/17:16:08] OpenEvent: STATUS_ACCESS_DENIED

[06:29/17:16:08] name: MSFT.VSA.COM.DISABLE.7488

[06:29/17:16:08] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:29/17:16:08] OpenEvent: STATUS_ACCESS_DENIED

[06:29/17:16:08] name: MSFT.VSA.IEC.STATUS.6c736db0

[06:29/17:16:08] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[06:29/17:16:13] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/17:16:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/17:16:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/17:16:13] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/17:16:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/17:16:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/17:16:13] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/17:16:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/17:16:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/17:16:13] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/17:16:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/17:16:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/17:17:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/17:17:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/17:17:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/17:17:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/17:17:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/17:17:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/17:17:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/17:17:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/17:17:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/17:17:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/17:17:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/17:17:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/17:17:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/17:17:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/17:17:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/17:17:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/17:17:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/17:17:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/17:17:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/17:17:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/17:17:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[06:29/17:17:14] NtCreateKey: STATUS_ACCESS_DENIED

[06:29/17:17:14] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[06:29/17:17:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/08:31:54] Adobe Reader Protected Mode Logging Initiated

[07:02/08:31:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/08:31:56] real path: \REGISTRY\MACHINE\Software\Adobe

[07:02/08:31:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/08:31:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/08:31:56] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:02/08:31:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:03] Adobe Reader Protected Mode Logging Initiated

[07:02/10:53:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:03] real path: \REGISTRY\MACHINE\Software\Adobe

[07:02/10:53:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:03] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:02/10:53:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:03] NtCreateMutant: STATUS_ACCESS_DENIED

[07:02/10:53:03] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:02/10:53:03] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:02/10:53:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:03] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:02/10:53:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:03] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:02/10:53:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/10:53:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/10:53:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/10:53:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/10:53:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/10:53:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/10:53:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/10:53:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/10:53:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:06] OpenEvent: STATUS_ACCESS_DENIED

[07:02/10:53:06] name: Global\BFE_Notify_Event_{a8a53b10-1bfe-4fd5-bf6e-769720bdf317}

[07:02/10:53:06] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:02/10:53:06] NtCreateMutant: STATUS_ACCESS_DENIED

[07:02/10:53:06] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:02/10:53:06] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:02/10:53:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:06] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:02/10:53:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:06] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:02/10:53:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:06] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:02/10:53:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:06] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:02/10:53:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:06] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:02/10:53:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:06] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:02/10:53:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/10:53:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/10:53:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/10:53:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/10:53:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/10:53:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/10:53:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/11:08:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/11:08:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/11:08:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/11:08:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/11:08:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/11:08:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/11:08:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/11:08:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/11:08:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/11:08:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/11:08:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/11:08:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/11:08:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/11:08:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/11:08:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/11:08:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/11:08:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/11:08:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/11:08:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/11:08:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/11:08:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/11:08:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/11:08:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/11:08:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/11:08:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/11:08:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/11:08:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/11:08:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/11:08:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/11:08:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/11:08:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/11:08:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/11:08:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/11:08:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/11:08:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/11:08:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/11:08:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/11:08:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/11:08:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/11:08:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/11:08:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/11:08:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/11:08:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/11:08:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/11:08:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/11:08:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/11:08:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/11:08:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/12:52:00] Adobe Reader Protected Mode Logging Initiated

[07:02/12:52:00] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/12:52:00] real path: \REGISTRY\MACHINE\Software\Adobe

[07:02/12:52:00] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/12:52:00] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/12:52:00] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:02/12:52:00] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/12:52:05] Adobe Reader Protected Mode Logging Initiated

[07:02/12:52:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/12:52:05] real path: \REGISTRY\MACHINE\Software\Adobe

[07:02/12:52:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/12:52:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/12:52:05] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:02/12:52:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:26] Adobe Reader Protected Mode Logging Initiated

[07:02/13:18:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:26] real path: \REGISTRY\MACHINE\Software\Adobe

[07:02/13:18:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:26] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:02/13:18:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:27] NtCreateMutant: STATUS_ACCESS_DENIED

[07:02/13:18:27] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:02/13:18:27] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:02/13:18:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:27] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:02/13:18:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:27] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:02/13:18:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:18:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:18:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:18:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:18:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:18:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:18:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:18:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:18:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:28] OpenEvent: STATUS_ACCESS_DENIED

[07:02/13:18:28] name: Global\BFE_Notify_Event_{bbf38fa8-5bf3-456a-ba23-de6c78495d46}

[07:02/13:18:28] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:02/13:18:28] OpenEvent: STATUS_ACCESS_DENIED

[07:02/13:18:28] name: Global\BFE_Notify_Event_{4f753813-fed9-49b4-904e-ade55bf1186f}

[07:02/13:18:28] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:02/13:18:28] NtCreateMutant: STATUS_ACCESS_DENIED

[07:02/13:18:28] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:02/13:18:28] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:02/13:18:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:28] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:02/13:18:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:28] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:02/13:18:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:28] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:02/13:18:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:28] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:02/13:18:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:28] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:02/13:18:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:28] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:02/13:18:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:29] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:18:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:29] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:18:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:29] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:18:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:18:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:18:29] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:18:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:20:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:20:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:20:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:20:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:20:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:20:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:20:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:20:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:20:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:20:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:20:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:20:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:20:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:20:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:20:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:20:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:20:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:20:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:20:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:20:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:20:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:20:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:20:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:20:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:20:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:20:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:20:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:20:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:20:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:20:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:20:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:20:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:20:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:20:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:20:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:20:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:20:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:20:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:20:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:20:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:20:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:20:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:20:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:20:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:20:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/13:20:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/13:20:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:02/13:20:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/17:48:48] Adobe Reader Protected Mode Logging Initiated

[07:02/17:48:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/17:48:49] real path: \REGISTRY\MACHINE\Software\Adobe

[07:02/17:48:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/17:48:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/17:48:49] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:02/17:48:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/17:48:49] NtCreateMutant: STATUS_ACCESS_DENIED

[07:02/17:48:49] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:02/17:48:49] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:02/17:48:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/17:48:49] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:02/17:48:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:02/17:48:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:02/17:48:49] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:02/17:48:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/08:25:29] Adobe Reader Protected Mode Logging Initiated

[07:03/08:25:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/08:25:30] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/08:25:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/08:25:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/08:25:30] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/08:25:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/08:36:17] Adobe Reader Protected Mode Logging Initiated

[07:03/08:36:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/08:36:18] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/08:36:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/08:36:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/08:36:18] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/08:36:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/08:36:18] NtCreateMutant: STATUS_ACCESS_DENIED

[07:03/08:36:18] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:03/08:36:18] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:03/08:36:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/08:36:18] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:03/08:36:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/08:36:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/08:36:18] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:03/08:36:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/08:54:30] Adobe Reader Protected Mode Logging Initiated

[07:03/08:54:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/08:54:31] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/08:54:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/08:54:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/08:54:31] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/08:54:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:06] Adobe Reader Protected Mode Logging Initiated

[07:03/09:17:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:06] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/09:17:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:06] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/09:17:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:06] NtCreateMutant: STATUS_ACCESS_DENIED

[07:03/09:17:06] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:03/09:17:06] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:03/09:17:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:06] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:03/09:17:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:06] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:03/09:17:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:08] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:08] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:08] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:08] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:08] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:08] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:08] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:08] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:08] OpenEvent: STATUS_ACCESS_DENIED

[07:03/09:17:08] name: Global\BFE_Notify_Event_{d69395c2-368f-4504-9408-c49f64d51d29}

[07:03/09:17:08] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:03/09:17:08] NtCreateMutant: STATUS_ACCESS_DENIED

[07:03/09:17:08] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:03/09:17:08] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:03/09:17:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:08] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:03/09:17:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:08] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:03/09:17:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:08] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:03/09:17:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:08] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:03/09:17:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:08] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:03/09:17:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:08] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:03/09:17:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:17:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:17:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:17:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:19] Adobe Reader Protected Mode Logging Initiated

[07:03/09:21:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:19] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/09:21:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:19] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/09:21:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:19] NtCreateMutant: STATUS_ACCESS_DENIED

[07:03/09:21:19] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:03/09:21:19] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:03/09:21:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:19] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:03/09:21:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:19] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:03/09:21:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:19] OpenEvent: STATUS_ACCESS_DENIED

[07:03/09:21:19] name: Global\BFE_Notify_Event_{e65ef6c4-d1f9-4939-ae43-72932a29ccdc}

[07:03/09:21:19] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:03/09:21:20] NtCreateMutant: STATUS_ACCESS_DENIED

[07:03/09:21:20] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:03/09:21:20] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:03/09:21:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:20] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:03/09:21:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:20] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:03/09:21:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:20] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:03/09:21:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:20] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:03/09:21:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:20] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:03/09:21:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:20] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:03/09:21:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:21:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:21:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:21:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:23] Adobe Reader Protected Mode Logging Initiated

[07:03/09:25:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:23] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/09:25:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:23] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/09:25:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:25] Adobe Reader Protected Mode Logging Initiated

[07:03/09:25:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:25] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/09:25:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:25] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/09:25:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:25] OpenEvent: STATUS_ACCESS_DENIED

[07:03/09:25:25] name: MSFT.VSA.COM.DISABLE.7092

[07:03/09:25:25] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:03/09:25:25] OpenEvent: STATUS_ACCESS_DENIED

[07:03/09:25:25] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:03/09:25:25] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:03/09:25:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:25:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:25:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:25:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:25:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:25:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:25:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:25:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:25:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:26] Adobe Reader Protected Mode Logging Initiated

[07:03/09:25:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:26] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/09:25:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:26] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/09:25:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:25:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:26:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:26:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:26:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:26:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:26:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:26:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:26:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:26:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:26:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:26:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:26:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:26:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:26:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:26:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:26:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:26:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:26:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:26:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:26:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:26:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:26:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:26:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:26:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:26:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:26:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:26:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:26:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:26:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:26:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:26:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:26:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:26:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:26:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:26:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:26:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:26:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:26:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:26:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:26:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:26:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:26:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:26:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:26:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:26:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:26:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:26:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:26:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:26:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:00] Adobe Reader Protected Mode Logging Initiated

[07:03/09:27:00] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:00] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/09:27:00] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:00] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:00] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/09:27:00] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:02] Adobe Reader Protected Mode Logging Initiated

[07:03/09:27:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:03] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/09:27:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:03] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/09:27:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:03] Adobe Reader Protected Mode Logging Initiated

[07:03/09:27:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:03] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/09:27:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:03] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/09:27:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:03] OpenEvent: STATUS_ACCESS_DENIED

[07:03/09:27:03] name: MSFT.VSA.COM.DISABLE.7184

[07:03/09:27:03] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:03/09:27:03] OpenEvent: STATUS_ACCESS_DENIED

[07:03/09:27:03] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:03/09:27:03] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:03/09:27:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:27:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:27:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:27:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:33] Adobe Reader Protected Mode Logging Initiated

[07:03/09:28:33] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:33] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/09:28:33] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:33] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:33] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/09:28:33] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:34] Adobe Reader Protected Mode Logging Initiated

[07:03/09:28:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:34] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/09:28:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:34] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/09:28:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:35] OpenEvent: STATUS_ACCESS_DENIED

[07:03/09:28:35] name: MSFT.VSA.COM.DISABLE.7304

[07:03/09:28:35] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:03/09:28:35] OpenEvent: STATUS_ACCESS_DENIED

[07:03/09:28:35] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:03/09:28:35] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:03/09:28:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:35] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:28:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:35] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:28:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:35] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:28:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:35] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:28:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:35] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:28:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:35] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:28:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:35] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:28:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:35] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:28:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:36] Adobe Reader Protected Mode Logging Initiated

[07:03/09:28:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:36] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/09:28:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:36] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/09:28:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:28:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:28:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:28:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:28:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:28:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:28:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:30:24] Adobe Reader Protected Mode Logging Initiated

[07:03/09:30:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:30:24] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/09:30:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:30:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:30:24] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/09:30:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:43:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:43:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:43:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:43:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:43:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:43:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:43:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:43:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:43:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:43:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:43:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:43:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:43:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:43:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:43:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:43:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:43:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:43:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:43:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:43:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:43:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:43:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:43:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:43:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:43:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:43:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:43:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:43:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:43:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:43:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:43:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:43:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:43:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:43:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:43:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:43:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:43:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:43:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:43:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:43:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:43:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:43:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:43:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:43:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:43:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/09:43:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/09:43:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:03/09:43:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/10:47:56] Adobe Reader Protected Mode Logging Initiated

[07:03/10:47:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/10:47:57] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/10:47:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/10:47:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/10:47:57] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/10:47:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/12:34:50] Adobe Reader Protected Mode Logging Initiated

[07:03/12:34:50] Adobe Reader Protected Mode Logging Initiated

[07:03/12:34:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/12:34:50] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/12:34:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/12:34:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/12:34:50] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/12:34:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/12:34:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/12:34:50] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/12:34:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/12:34:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/12:34:50] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/12:34:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/12:34:50] OpenEvent: STATUS_ACCESS_DENIED

[07:03/12:34:50] name: MSFT.VSA.COM.DISABLE.7920

[07:03/12:34:50] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:03/12:34:50] OpenEvent: STATUS_ACCESS_DENIED

[07:03/12:34:50] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:03/12:34:50] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:03/12:36:36] Adobe Reader Protected Mode Logging Initiated

[07:03/12:36:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/12:36:37] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/12:36:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/12:36:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/12:36:37] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/12:36:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/14:05:34] Adobe Reader Protected Mode Logging Initiated

[07:03/14:05:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/14:05:34] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/14:05:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/14:05:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/14:05:34] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/14:05:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/14:08:54] Adobe Reader Protected Mode Logging Initiated

[07:03/14:08:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/14:08:54] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/14:08:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/14:08:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/14:08:54] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/14:08:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/14:08:54] OpenEvent: STATUS_ACCESS_DENIED

[07:03/14:08:54] name: MSFT.VSA.COM.DISABLE.7428

[07:03/14:08:54] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:03/14:08:54] OpenEvent: STATUS_ACCESS_DENIED

[07:03/14:08:54] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:03/14:08:54] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:03/15:00:57] Adobe Reader Protected Mode Logging Initiated

[07:03/15:00:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/15:00:58] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/15:00:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/15:00:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/15:00:58] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/15:00:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/18:49:18] Adobe Reader Protected Mode Logging Initiated

[07:03/18:49:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/18:49:20] real path: \REGISTRY\MACHINE\Software\Adobe

[07:03/18:49:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:03/18:49:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:03/18:49:20] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:03/18:49:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/08:12:37] Adobe Reader Protected Mode Logging Initiated

[07:04/08:12:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/08:12:37] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/08:12:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/08:12:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/08:12:37] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/08:12:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/11:24:19] Adobe Reader Protected Mode Logging Initiated

[07:04/11:24:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/11:24:20] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/11:24:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/11:24:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/11:24:20] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/11:24:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/11:24:20] OpenEvent: STATUS_ACCESS_DENIED

[07:04/11:24:20] name: MSFT.VSA.COM.DISABLE.7732

[07:04/11:24:20] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:04/11:24:20] OpenEvent: STATUS_ACCESS_DENIED

[07:04/11:24:20] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:04/11:24:20] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:04/12:13:53] Adobe Reader Protected Mode Logging Initiated

[07:04/12:13:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/12:13:53] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/12:13:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/12:13:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/12:13:53] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/12:13:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/12:13:53] OpenEvent: STATUS_ACCESS_DENIED

[07:04/12:13:53] name: MSFT.VSA.COM.DISABLE.6088

[07:04/12:13:53] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:04/12:13:53] OpenEvent: STATUS_ACCESS_DENIED

[07:04/12:13:53] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:04/12:13:53] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:04/13:27:24] Adobe Reader Protected Mode Logging Initiated

[07:04/13:27:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/13:27:24] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/13:27:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/13:27:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/13:27:24] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/13:27:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/13:27:41] Adobe Reader Protected Mode Logging Initiated

[07:04/13:27:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/13:27:41] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/13:27:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/13:27:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/13:27:41] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/13:27:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/14:25:53] Adobe Reader Protected Mode Logging Initiated

[07:04/14:25:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/14:25:53] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/14:25:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/14:25:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/14:25:53] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/14:25:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/14:30:38] Adobe Reader Protected Mode Logging Initiated

[07:04/14:30:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/14:30:39] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/14:30:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/14:30:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/14:30:39] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/14:30:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/14:30:39] OpenEvent: STATUS_ACCESS_DENIED

[07:04/14:30:39] name: MSFT.VSA.COM.DISABLE.1208

[07:04/14:30:39] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:04/14:30:39] OpenEvent: STATUS_ACCESS_DENIED

[07:04/14:30:39] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:04/14:30:39] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:04/15:12:05] Adobe Reader Protected Mode Logging Initiated

[07:04/15:12:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:12:05] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/15:12:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:12:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:12:05] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/15:12:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:13:19] Adobe Reader Protected Mode Logging Initiated

[07:04/15:13:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:13:19] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/15:13:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:13:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:13:19] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/15:13:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:32:04] Adobe Reader Protected Mode Logging Initiated

[07:04/15:32:04] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:32:04] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/15:32:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:32:04] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:32:04] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/15:32:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:35:23] Adobe Reader Protected Mode Logging Initiated

[07:04/15:36:20] Adobe Reader Protected Mode Logging Initiated

[07:04/15:36:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:36:20] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/15:36:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:36:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:36:20] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/15:36:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:36:22] Adobe Reader Protected Mode Logging Initiated

[07:04/15:36:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:36:23] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/15:36:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:36:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:36:23] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/15:36:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:39:09] Adobe Reader Protected Mode Logging Initiated

[07:04/15:39:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:39:09] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/15:39:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:39:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:39:09] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/15:39:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:39:56] Adobe Reader Protected Mode Logging Initiated

[07:04/15:39:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:39:56] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/15:39:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:39:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:39:56] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/15:39:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:39:58] Adobe Reader Protected Mode Logging Initiated

[07:04/15:39:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:39:58] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/15:39:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:39:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:39:58] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/15:39:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:40:41] Adobe Reader Protected Mode Logging Initiated

[07:04/15:40:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:40:41] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/15:40:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:40:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:40:41] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/15:40:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:49:22] Adobe Reader Protected Mode Logging Initiated

[07:04/15:49:22] Adobe Reader Protected Mode Logging Initiated

[07:04/15:49:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:49:22] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/15:49:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:49:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:49:22] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/15:49:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:49:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:49:22] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/15:49:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:49:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/15:49:22] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/15:49:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/15:49:22] OpenEvent: STATUS_ACCESS_DENIED

[07:04/15:49:22] name: MSFT.VSA.COM.DISABLE.6660

[07:04/15:49:22] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:04/15:49:22] OpenEvent: STATUS_ACCESS_DENIED

[07:04/15:49:22] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:04/15:49:22] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:04/16:11:29] Adobe Reader Protected Mode Logging Initiated

[07:04/16:11:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:11:29] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/16:11:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:11:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:11:29] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/16:11:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:11:33] Adobe Reader Protected Mode Logging Initiated

[07:04/16:11:33] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:11:33] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/16:11:33] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:11:33] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:11:33] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/16:11:33] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:13:29] Adobe Reader Protected Mode Logging Initiated

[07:04/16:13:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:13:29] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/16:13:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:13:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:13:29] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/16:13:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:13:29] OpenEvent: STATUS_ACCESS_DENIED

[07:04/16:13:29] name: MSFT.VSA.COM.DISABLE.2384

[07:04/16:13:29] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:04/16:13:29] OpenEvent: STATUS_ACCESS_DENIED

[07:04/16:13:29] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:04/16:13:29] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:04/16:13:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:13:30] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:13:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:13:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:13:30] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:13:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:13:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:13:30] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:13:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:13:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:13:30] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:13:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:13:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:13:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:13:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:13:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:13:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:13:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:13:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:13:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:13:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:13:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:13:31] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:13:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:13:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:13:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:13:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:13:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:13:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:13:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:13:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:13:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:13:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:13:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:13:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:13:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:16:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:16:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:16:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:16:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:16:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:16:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:16:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:16:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:16:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:16:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:16:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:16:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:16:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:16:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:16:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:04/16:16:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:32] Adobe Reader Protected Mode Logging Initiated

[07:04/16:16:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:32] real path: \REGISTRY\MACHINE\Software\Adobe

[07:04/16:16:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:04/16:16:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:04/16:16:32] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:04/16:16:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/08:17:07] Adobe Reader Protected Mode Logging Initiated

[07:05/08:17:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/08:17:08] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/08:17:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/08:17:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/08:17:08] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/08:17:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/08:21:05] Adobe Reader Protected Mode Logging Initiated

[07:05/08:21:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/08:21:05] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/08:21:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/08:21:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/08:21:05] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/08:21:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/09:07:54] Adobe Reader Protected Mode Logging Initiated

[07:05/09:07:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/09:07:54] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/09:07:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/09:07:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/09:07:54] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/09:07:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/09:53:11] Adobe Reader Protected Mode Logging Initiated

[07:05/09:53:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/09:53:11] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/09:53:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/09:53:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/09:53:11] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/09:53:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/09:53:36] Adobe Reader Protected Mode Logging Initiated

[07:05/09:53:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/09:53:37] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/09:53:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/09:53:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/09:53:37] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/09:53:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/09:53:37] OpenEvent: STATUS_ACCESS_DENIED

[07:05/09:53:37] name: MSFT.VSA.COM.DISABLE.7340

[07:05/09:53:37] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:05/09:53:37] OpenEvent: STATUS_ACCESS_DENIED

[07:05/09:53:37] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:05/09:53:37] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:05/10:10:31] Adobe Reader Protected Mode Logging Initiated

[07:05/10:10:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:10:31] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/10:10:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:10:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:10:31] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/10:10:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:10:35] Adobe Reader Protected Mode Logging Initiated

[07:05/10:10:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:10:36] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/10:10:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:10:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:10:36] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/10:10:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:10:59] Adobe Reader Protected Mode Logging Initiated

[07:05/10:11:00] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:11:00] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/10:11:00] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:11:00] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:11:00] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/10:11:00] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:11:05] Adobe Reader Protected Mode Logging Initiated

[07:05/10:11:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:11:06] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/10:11:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:11:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:11:06] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/10:11:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:12:14] Adobe Reader Protected Mode Logging Initiated

[07:05/10:12:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:12:15] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/10:12:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:12:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:12:15] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/10:12:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:14:22] Adobe Reader Protected Mode Logging Initiated

[07:05/10:14:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:14:22] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/10:14:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:14:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:14:22] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/10:14:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:14:26] Adobe Reader Protected Mode Logging Initiated

[07:05/10:14:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:14:26] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/10:14:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:14:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:14:26] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/10:14:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:14:41] Adobe Reader Protected Mode Logging Initiated

[07:05/10:14:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:14:41] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/10:14:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:14:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:14:41] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/10:14:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:14:46] Adobe Reader Protected Mode Logging Initiated

[07:05/10:14:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:14:46] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/10:14:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:14:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:14:46] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/10:14:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:15:08] Adobe Reader Protected Mode Logging Initiated

[07:05/10:15:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:15:09] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/10:15:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:15:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:15:09] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/10:15:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:15:20] Adobe Reader Protected Mode Logging Initiated

[07:05/10:15:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:15:20] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/10:15:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:15:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:15:20] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/10:15:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:15:20] Adobe Reader Protected Mode Logging Initiated

[07:05/10:15:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:15:20] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/10:15:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:15:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:15:20] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/10:15:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:15:20] OpenEvent: STATUS_ACCESS_DENIED

[07:05/10:15:20] name: MSFT.VSA.COM.DISABLE.6708

[07:05/10:15:20] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:05/10:15:20] OpenEvent: STATUS_ACCESS_DENIED

[07:05/10:15:20] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:05/10:15:20] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:05/10:16:44] Adobe Reader Protected Mode Logging Initiated

[07:05/10:28:48] Adobe Reader Protected Mode Logging Initiated

[07:05/10:28:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:28:48] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/10:28:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:28:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:28:48] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/10:28:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:28:50] Adobe Reader Protected Mode Logging Initiated

[07:05/10:28:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:28:50] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/10:28:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:28:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:28:50] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/10:28:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:31:26] Adobe Reader Protected Mode Logging Initiated

[07:05/10:31:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:31:27] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/10:31:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:31:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/10:31:27] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/10:31:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/10:31:27] OpenEvent: STATUS_ACCESS_DENIED

[07:05/10:31:27] name: MSFT.VSA.COM.DISABLE.6464

[07:05/10:31:27] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:05/10:31:27] OpenEvent: STATUS_ACCESS_DENIED

[07:05/10:31:27] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:05/10:31:27] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:05/15:28:25] Adobe Reader Protected Mode Logging Initiated

[07:05/15:28:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/15:28:25] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/15:28:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/15:28:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/15:28:25] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/15:28:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/15:37:23] Adobe Reader Protected Mode Logging Initiated

[07:05/15:37:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/15:37:23] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/15:37:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/15:37:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/15:37:23] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/15:37:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/15:37:23] OpenEvent: STATUS_ACCESS_DENIED

[07:05/15:37:23] name: MSFT.VSA.COM.DISABLE.7568

[07:05/15:37:23] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:05/15:37:23] OpenEvent: STATUS_ACCESS_DENIED

[07:05/15:37:23] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:05/15:37:23] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:05/16:33:07] Adobe Reader Protected Mode Logging Initiated

[07:05/16:33:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/16:33:09] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/16:33:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/16:33:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/16:33:09] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/16:33:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/16:36:38] Adobe Reader Protected Mode Logging Initiated

[07:05/16:36:38] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/16:36:38] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/16:36:38] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/16:36:38] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/16:36:38] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/16:36:38] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/16:58:40] Adobe Reader Protected Mode Logging Initiated

[07:05/16:58:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/16:58:40] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/16:58:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/16:58:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/16:58:40] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/16:58:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/16:58:44] Adobe Reader Protected Mode Logging Initiated

[07:05/16:58:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/16:58:44] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/16:58:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/16:58:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/16:58:44] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/16:58:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/16:59:06] Adobe Reader Protected Mode Logging Initiated

[07:05/16:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/16:59:06] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/16:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/16:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/16:59:06] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/16:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/16:59:23] Adobe Reader Protected Mode Logging Initiated

[07:05/16:59:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/16:59:23] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/16:59:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/16:59:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/16:59:23] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/16:59:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/16:59:26] Adobe Reader Protected Mode Logging Initiated

[07:05/16:59:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/16:59:27] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/16:59:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/16:59:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/16:59:27] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/16:59:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/16:59:36] Adobe Reader Protected Mode Logging Initiated

[07:05/16:59:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/16:59:36] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/16:59:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/16:59:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/16:59:36] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/16:59:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/17:00:29] Adobe Reader Protected Mode Logging Initiated

[07:05/17:00:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/17:00:29] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/17:00:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/17:00:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/17:00:29] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/17:00:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/17:00:33] Adobe Reader Protected Mode Logging Initiated

[07:05/17:00:33] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/17:00:33] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/17:00:33] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/17:00:33] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/17:00:33] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/17:00:33] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/17:00:39] Adobe Reader Protected Mode Logging Initiated

[07:05/17:00:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/17:00:39] real path: \REGISTRY\MACHINE\Software\Adobe

[07:05/17:00:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:05/17:00:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:05/17:00:39] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:05/17:00:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/08:17:16] Adobe Reader Protected Mode Logging Initiated

[07:06/08:17:16] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/08:17:16] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/08:17:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/08:17:16] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/08:17:16] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/08:17:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/10:00:24] Adobe Reader Protected Mode Logging Initiated

[07:06/10:00:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/10:00:24] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/10:00:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/10:00:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/10:00:24] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/10:00:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/10:00:24] OpenEvent: STATUS_ACCESS_DENIED

[07:06/10:00:24] name: MSFT.VSA.COM.DISABLE.4260

[07:06/10:00:24] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:06/10:00:24] OpenEvent: STATUS_ACCESS_DENIED

[07:06/10:00:24] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:06/10:00:24] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:06/11:18:30] Adobe Reader Protected Mode Logging Initiated

[07:06/11:18:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:18:30] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/11:18:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:18:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:18:30] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/11:18:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:20:25] Adobe Reader Protected Mode Logging Initiated

[07:06/11:20:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:20:25] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/11:20:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:20:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:20:25] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/11:20:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:20:54] Adobe Reader Protected Mode Logging Initiated

[07:06/11:20:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:20:55] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/11:20:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:20:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:20:55] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/11:20:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:21:39] Adobe Reader Protected Mode Logging Initiated

[07:06/11:21:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:21:39] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/11:21:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:21:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:21:39] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/11:21:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:23:37] Adobe Reader Protected Mode Logging Initiated

[07:06/11:23:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:23:37] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/11:23:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:23:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:23:37] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/11:23:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:24:35] Adobe Reader Protected Mode Logging Initiated

[07:06/11:24:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:24:36] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/11:24:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:24:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:24:36] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/11:24:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:25:48] Adobe Reader Protected Mode Logging Initiated

[07:06/11:25:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:25:49] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/11:25:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:25:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:25:49] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/11:25:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:26:57] Adobe Reader Protected Mode Logging Initiated

[07:06/11:26:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:26:57] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/11:26:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:26:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:26:57] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/11:26:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:42:55] Adobe Reader Protected Mode Logging Initiated

[07:06/11:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:42:56] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/11:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/11:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/11:42:56] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/11:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:00:48] Adobe Reader Protected Mode Logging Initiated

[07:06/12:00:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:00:48] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/12:00:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:00:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:00:48] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/12:00:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:03:29] Adobe Reader Protected Mode Logging Initiated

[07:06/12:03:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:03:30] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/12:03:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:03:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:03:30] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/12:03:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:03:54] Adobe Reader Protected Mode Logging Initiated

[07:06/12:03:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:03:54] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/12:03:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:03:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:03:54] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/12:03:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:03:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:03:55] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/12:03:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:03:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:03:55] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/12:03:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:03:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:03:55] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/12:03:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:03:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:03:55] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/12:03:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:03:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:03:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/12:03:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:03:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:03:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/12:03:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:03:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:03:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/12:03:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:03:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:03:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/12:03:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:04:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:04:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/12:04:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:04:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:04:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/12:04:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:04:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:04:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/12:04:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:04:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:04:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/12:04:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:04:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:04:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/12:04:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:04:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:04:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/12:04:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:04:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:04:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/12:04:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:04:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:04:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/12:04:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:04:31] Adobe Reader Protected Mode Logging Initiated

[07:06/12:04:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:04:31] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/12:04:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:04:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:04:31] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/12:04:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:04:44] Adobe Reader Protected Mode Logging Initiated

[07:06/12:04:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:04:45] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/12:04:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:04:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:04:45] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/12:04:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:04:51] Adobe Reader Protected Mode Logging Initiated

[07:06/12:04:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:04:51] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/12:04:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/12:04:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/12:04:51] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/12:04:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:36] Adobe Reader Protected Mode Logging Initiated

[07:06/15:09:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:36] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/15:09:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:36] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/15:09:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:39] Adobe Reader Protected Mode Logging Initiated

[07:06/15:09:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:39] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/15:09:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:39] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/15:09:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:46] Adobe Reader Protected Mode Logging Initiated

[07:06/15:09:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:46] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/15:09:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:46] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/15:09:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:46] OpenEvent: STATUS_ACCESS_DENIED

[07:06/15:09:46] name: MSFT.VSA.COM.DISABLE.3756

[07:06/15:09:46] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:06/15:09:46] OpenEvent: STATUS_ACCESS_DENIED

[07:06/15:09:46] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:06/15:09:46] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:06/15:09:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:09:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:09:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:09:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:09:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:47] Adobe Reader Protected Mode Logging Initiated

[07:06/15:09:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:09:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:09:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:09:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:09:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:47] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/15:09:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:47] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/15:09:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:49] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:09:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:49] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:09:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:49] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:09:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:09:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:09:49] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:09:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:10:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:10:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:10:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:10:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:10:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:10:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:10:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:10:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:10:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:10:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:10:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:10:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:10:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:10:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:10:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:10:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:59] Adobe Reader Protected Mode Logging Initiated

[07:06/15:10:59] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:59] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/15:10:59] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:10:59] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:10:59] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/15:10:59] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:12:10] Adobe Reader Protected Mode Logging Initiated

[07:06/15:12:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:12:10] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/15:12:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:12:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:12:10] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/15:12:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:43] Adobe Reader Protected Mode Logging Initiated

[07:06/15:15:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:43] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/15:15:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:43] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/15:15:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:45] Adobe Reader Protected Mode Logging Initiated

[07:06/15:15:45] Adobe Reader Protected Mode Logging Initiated

[07:06/15:15:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:45] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/15:15:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:45] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/15:15:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:45] OpenEvent: STATUS_ACCESS_DENIED

[07:06/15:15:45] name: MSFT.VSA.COM.DISABLE.664

[07:06/15:15:45] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:06/15:15:45] OpenEvent: STATUS_ACCESS_DENIED

[07:06/15:15:45] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:06/15:15:45] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:06/15:15:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:45] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/15:15:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:45] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/15:15:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:46] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:15:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:46] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:15:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:46] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:15:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:46] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:15:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:46] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:15:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:46] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:15:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:46] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:15:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:46] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:15:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:15:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:15:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:15:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:15:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:15:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:15:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:16:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:16:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:16:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:16:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:16:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:16:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:16:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:16:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:16:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:16:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:16:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:16:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:16:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:16:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:16:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:16:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:16:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:16:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:16:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:16:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:16:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:16:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:16:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:16:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:16:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:16:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:16:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:16:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:16:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:16:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:16:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:16:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:16:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:16:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:16:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:16:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:16:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:16:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:16:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:16:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:16:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:16:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:16:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:16:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:16:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:16:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:16:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:06/15:16:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:17:09] Adobe Reader Protected Mode Logging Initiated

[07:06/15:17:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:17:10] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/15:17:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:17:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:17:10] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/15:17:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:19:01] Adobe Reader Protected Mode Logging Initiated

[07:06/15:19:01] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:19:01] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/15:19:01] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:19:01] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:19:01] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/15:19:01] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:25:39] Adobe Reader Protected Mode Logging Initiated

[07:06/15:25:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:25:39] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/15:25:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:25:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:25:39] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/15:25:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:43:15] Adobe Reader Protected Mode Logging Initiated

[07:06/15:43:16] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:43:16] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/15:43:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:43:16] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:43:16] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/15:43:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:59:44] Adobe Reader Protected Mode Logging Initiated

[07:06/15:59:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:59:45] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/15:59:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:59:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:59:45] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/15:59:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:59:47] Adobe Reader Protected Mode Logging Initiated

[07:06/15:59:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:59:47] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/15:59:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/15:59:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/15:59:47] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/15:59:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/16:25:53] Adobe Reader Protected Mode Logging Initiated

[07:06/16:25:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/16:25:54] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/16:25:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/16:25:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/16:25:54] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/16:25:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/16:25:54] OpenEvent: STATUS_ACCESS_DENIED

[07:06/16:25:54] name: MSFT.VSA.COM.DISABLE.4120

[07:06/16:25:54] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:06/16:25:54] OpenEvent: STATUS_ACCESS_DENIED

[07:06/16:25:54] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:06/16:25:54] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:06/16:38:45] Adobe Reader Protected Mode Logging Initiated

[07:06/16:38:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/16:38:45] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/16:38:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/16:38:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/16:38:45] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/16:38:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/16:38:45] OpenEvent: STATUS_ACCESS_DENIED

[07:06/16:38:45] name: MSFT.VSA.COM.DISABLE.1724

[07:06/16:38:45] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:06/16:38:45] OpenEvent: STATUS_ACCESS_DENIED

[07:06/16:38:45] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:06/16:38:45] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:06/17:09:22] Adobe Reader Protected Mode Logging Initiated

[07:06/17:09:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/17:09:23] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/17:09:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/17:09:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/17:09:23] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/17:09:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/17:35:58] Adobe Reader Protected Mode Logging Initiated

[07:06/17:35:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/17:35:58] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/17:35:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/17:35:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/17:35:58] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/17:35:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/17:40:45] Adobe Reader Protected Mode Logging Initiated

[07:06/17:40:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/17:40:45] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/17:40:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/17:40:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/17:40:45] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/17:40:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/17:40:47] Adobe Reader Protected Mode Logging Initiated

[07:06/17:40:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/17:40:47] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/17:40:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/17:40:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/17:40:47] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/17:40:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/17:49:42] Adobe Reader Protected Mode Logging Initiated

[07:06/17:49:42] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/17:49:42] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/17:49:42] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/17:49:42] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/17:49:42] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/17:49:42] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/17:49:42] OpenEvent: STATUS_ACCESS_DENIED

[07:06/17:49:42] name: MSFT.VSA.COM.DISABLE.5012

[07:06/17:49:42] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:06/17:49:42] OpenEvent: STATUS_ACCESS_DENIED

[07:06/17:49:42] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:06/17:49:42] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:06/18:09:46] Adobe Reader Protected Mode Logging Initiated

[07:06/18:09:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/18:09:46] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/18:09:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/18:09:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/18:09:46] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/18:09:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/18:09:49] Adobe Reader Protected Mode Logging Initiated

[07:06/18:09:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/18:09:49] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/18:09:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/18:09:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/18:09:49] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/18:09:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/18:21:49] Adobe Reader Protected Mode Logging Initiated

[07:06/18:21:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/18:21:50] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/18:21:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/18:21:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/18:21:50] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/18:21:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/18:21:50] OpenEvent: STATUS_ACCESS_DENIED

[07:06/18:21:50] name: MSFT.VSA.COM.DISABLE.7464

[07:06/18:21:50] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:06/18:21:50] OpenEvent: STATUS_ACCESS_DENIED

[07:06/18:21:50] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:06/18:21:50] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:06/19:00:48] Adobe Reader Protected Mode Logging Initiated

[07:06/19:00:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/19:00:49] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/19:00:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/19:00:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/19:00:49] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/19:00:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/19:04:34] Adobe Reader Protected Mode Logging Initiated

[07:06/19:04:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/19:04:34] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/19:04:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/19:04:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/19:04:34] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/19:04:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/19:04:39] Adobe Reader Protected Mode Logging Initiated

[07:06/19:04:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/19:04:39] real path: \REGISTRY\MACHINE\Software\Adobe

[07:06/19:04:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:06/19:04:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:06/19:04:39] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:06/19:04:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/07:28:44] Adobe Reader Protected Mode Logging Initiated

[07:16/07:28:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/07:28:45] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/07:28:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/07:28:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/07:28:45] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/07:28:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/08:21:26] Adobe Reader Protected Mode Logging Initiated

[07:16/08:21:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/08:21:26] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/08:21:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/08:21:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/08:21:26] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/08:21:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/08:21:26] OpenEvent: STATUS_ACCESS_DENIED

[07:16/08:21:26] name: MSFT.VSA.COM.DISABLE.7920

[07:16/08:21:26] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/08:21:26] OpenEvent: STATUS_ACCESS_DENIED

[07:16/08:21:26] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:16/08:21:26] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/08:21:37] Adobe Reader Protected Mode Logging Initiated

[07:16/08:21:38] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/08:21:38] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/08:21:38] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/08:21:38] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/08:21:38] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/08:21:38] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/08:21:40] Adobe Reader Protected Mode Logging Initiated

[07:16/08:21:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/08:21:40] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/08:21:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/08:21:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/08:21:40] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/08:21:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/08:21:41] OpenEvent: STATUS_ACCESS_DENIED

[07:16/08:21:41] name: MSFT.VSA.COM.DISABLE.7716

[07:16/08:21:41] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/08:21:41] OpenEvent: STATUS_ACCESS_DENIED

[07:16/08:21:41] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:16/08:21:41] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/08:22:43] Adobe Reader Protected Mode Logging Initiated

[07:16/08:22:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/08:22:43] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/08:22:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/08:22:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/08:22:43] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/08:22:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/08:24:36] Adobe Reader Protected Mode Logging Initiated

[07:16/08:24:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/08:24:37] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/08:24:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/08:24:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/08:24:37] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/08:24:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/08:30:43] Adobe Reader Protected Mode Logging Initiated

[07:16/08:30:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/08:30:43] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/08:30:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/08:30:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/08:30:43] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/08:30:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/08:31:29] Adobe Reader Protected Mode Logging Initiated

[07:16/08:31:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/08:31:30] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/08:31:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/08:31:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/08:31:30] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/08:31:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:04:37] Adobe Reader Protected Mode Logging Initiated

[07:16/09:04:38] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:04:38] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:04:38] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:04:38] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:04:38] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:04:38] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:04:38] OpenEvent: STATUS_ACCESS_DENIED

[07:16/09:04:38] name: MSFT.VSA.COM.DISABLE.5980

[07:16/09:04:38] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/09:04:38] OpenEvent: STATUS_ACCESS_DENIED

[07:16/09:04:38] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:16/09:04:38] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/09:38:39] Adobe Reader Protected Mode Logging Initiated

[07:16/09:38:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:38:39] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:38:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:38:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:38:39] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:38:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:38:39] OpenEvent: STATUS_ACCESS_DENIED

[07:16/09:38:39] name: MSFT.VSA.COM.DISABLE.7688

[07:16/09:38:39] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/09:38:39] OpenEvent: STATUS_ACCESS_DENIED

[07:16/09:38:39] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:16/09:38:39] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/09:39:15] Adobe Reader Protected Mode Logging Initiated

[07:16/09:39:16] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:39:16] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:39:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:39:16] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:39:16] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:39:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:39:18] Adobe Reader Protected Mode Logging Initiated

[07:16/09:39:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:39:18] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:39:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:39:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:39:18] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:39:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:39:34] Adobe Reader Protected Mode Logging Initiated

[07:16/09:39:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:39:34] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:39:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:39:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:39:34] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:39:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:39:38] Adobe Reader Protected Mode Logging Initiated

[07:16/09:39:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:39:39] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:39:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:39:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:39:39] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:39:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:39:41] Adobe Reader Protected Mode Logging Initiated

[07:16/09:39:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:39:41] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:39:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:39:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:39:41] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:39:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:39:43] Adobe Reader Protected Mode Logging Initiated

[07:16/09:39:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:39:44] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:39:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:39:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:39:44] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:39:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:41:26] Adobe Reader Protected Mode Logging Initiated

[07:16/09:41:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:41:26] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:41:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:41:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:41:26] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:41:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:41:41] Adobe Reader Protected Mode Logging Initiated

[07:16/09:41:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:41:41] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:41:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:41:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:41:41] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:41:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:00] Adobe Reader Protected Mode Logging Initiated

[07:16/09:42:00] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:00] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:42:00] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:00] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:00] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:42:00] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:09] Adobe Reader Protected Mode Logging Initiated

[07:16/09:42:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:09] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:42:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:09] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:42:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:13] Adobe Reader Protected Mode Logging Initiated

[07:16/09:42:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:13] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:42:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:13] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:42:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:18] Adobe Reader Protected Mode Logging Initiated

[07:16/09:42:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:18] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:42:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:18] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:42:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:18] OpenEvent: STATUS_ACCESS_DENIED

[07:16/09:42:18] name: MSFT.VSA.COM.DISABLE.4936

[07:16/09:42:18] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/09:42:18] OpenEvent: STATUS_ACCESS_DENIED

[07:16/09:42:18] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:16/09:42:18] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/09:42:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:37] Adobe Reader Protected Mode Logging Initiated

[07:16/09:42:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:37] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:42:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:37] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:42:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:40] Adobe Reader Protected Mode Logging Initiated

[07:16/09:42:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:40] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:42:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:40] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:42:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:40] OpenEvent: STATUS_ACCESS_DENIED

[07:16/09:42:40] name: MSFT.VSA.COM.DISABLE.5760

[07:16/09:42:40] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/09:42:40] OpenEvent: STATUS_ACCESS_DENIED

[07:16/09:42:40] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:16/09:42:40] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/09:42:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:40] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:40] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:40] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:40] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:40] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:40] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:40] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:40] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:50] Adobe Reader Protected Mode Logging Initiated

[07:16/09:42:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:50] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:42:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:50] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:42:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:51] Adobe Reader Protected Mode Logging Initiated

[07:16/09:42:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:51] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:42:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:51] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:42:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:51] OpenEvent: STATUS_ACCESS_DENIED

[07:16/09:42:51] name: MSFT.VSA.COM.DISABLE.6308

[07:16/09:42:51] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/09:42:51] OpenEvent: STATUS_ACCESS_DENIED

[07:16/09:42:51] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:16/09:42:51] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/09:42:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:42:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:42:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:42:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:01] Adobe Reader Protected Mode Logging Initiated

[07:16/09:43:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:02] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:43:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:02] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:43:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:02] OpenEvent: STATUS_ACCESS_DENIED

[07:16/09:43:02] name: MSFT.VSA.COM.DISABLE.4460

[07:16/09:43:02] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/09:43:02] OpenEvent: STATUS_ACCESS_DENIED

[07:16/09:43:02] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:16/09:43:02] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/09:43:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:05] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/09:43:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:11] Adobe Reader Protected Mode Logging Initiated

[07:16/09:43:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:12] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:43:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:43:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:43:12] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:43:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:55:35] Adobe Reader Protected Mode Logging Initiated

[07:16/09:55:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:55:35] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:55:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:55:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:55:35] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:55:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:55:35] OpenEvent: STATUS_ACCESS_DENIED

[07:16/09:55:35] name: MSFT.VSA.COM.DISABLE.1812

[07:16/09:55:35] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/09:55:35] OpenEvent: STATUS_ACCESS_DENIED

[07:16/09:55:35] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:16/09:55:35] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/09:58:13] Adobe Reader Protected Mode Logging Initiated

[07:16/09:58:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:58:13] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:58:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:58:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:58:13] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:58:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:58:26] Adobe Reader Protected Mode Logging Initiated

[07:16/09:58:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:58:27] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/09:58:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/09:58:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/09:58:27] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/09:58:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/10:30:37] Adobe Reader Protected Mode Logging Initiated

[07:16/10:30:38] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/10:30:38] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/10:30:38] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/10:30:38] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/10:30:38] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/10:30:38] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/10:31:35] Adobe Reader Protected Mode Logging Initiated

[07:16/10:31:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/10:31:35] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/10:31:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/10:31:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/10:31:35] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/10:31:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/11:29:18] Adobe Reader Protected Mode Logging Initiated

[07:16/11:29:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/11:29:19] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/11:29:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/11:29:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/11:29:19] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/11:29:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/11:29:23] Adobe Reader Protected Mode Logging Initiated

[07:16/11:29:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/11:29:24] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/11:29:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/11:29:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/11:29:24] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/11:29:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/11:35:58] Adobe Reader Protected Mode Logging Initiated

[07:16/11:35:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/11:35:58] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/11:35:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/11:35:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/11:35:58] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/11:35:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/11:54:41] Adobe Reader Protected Mode Logging Initiated

[07:16/11:54:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/11:54:41] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/11:54:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/11:54:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/11:54:41] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/11:54:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/13:52:58] Adobe Reader Protected Mode Logging Initiated

[07:16/13:52:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/13:52:58] real path: \REGISTRY\MACHINE\Software\Adobe

[07:16/13:52:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/13:52:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/13:52:58] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:16/13:52:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/13:52:58] OpenEvent: STATUS_ACCESS_DENIED

[07:16/13:52:58] name: MSFT.VSA.COM.DISABLE.7084

[07:16/13:52:58] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/13:52:58] OpenEvent: STATUS_ACCESS_DENIED

[07:16/13:52:58] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:16/13:52:58] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:16/13:59:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/13:59:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/13:59:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/13:59:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/13:59:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/13:59:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/13:59:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/13:59:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/13:59:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/13:59:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/13:59:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/13:59:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/13:59:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/13:59:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/13:59:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/13:59:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/13:59:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/13:59:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/13:59:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/13:59:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/13:59:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/13:59:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/13:59:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/13:59:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/13:59:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/13:59:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/13:59:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/13:59:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/13:59:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/13:59:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/13:59:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/13:59:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/13:59:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:16/13:59:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:16/13:59:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:16/13:59:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/08:40:33] Adobe Reader Protected Mode Logging Initiated

[07:17/08:40:33] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/08:40:33] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/08:40:33] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/08:40:33] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/08:40:33] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/08:40:33] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/08:44:31] Adobe Reader Protected Mode Logging Initiated

[07:17/08:44:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/08:44:31] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/08:44:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/08:44:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/08:44:31] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/08:44:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/10:41:42] Adobe Reader Protected Mode Logging Initiated

[07:17/10:41:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/10:41:43] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/10:41:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/10:41:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/10:41:43] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/10:41:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:03:04] Adobe Reader Protected Mode Logging Initiated

[07:17/11:03:04] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:03:04] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/11:03:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:03:04] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:03:04] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/11:03:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:03:35] Adobe Reader Protected Mode Logging Initiated

[07:17/11:03:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:03:35] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/11:03:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:03:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:03:35] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/11:03:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:03:43] Adobe Reader Protected Mode Logging Initiated

[07:17/11:03:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:03:43] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/11:03:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:03:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:03:43] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/11:03:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:03:46] Adobe Reader Protected Mode Logging Initiated

[07:17/11:03:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:03:47] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/11:03:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:03:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:03:47] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/11:03:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:03:52] Adobe Reader Protected Mode Logging Initiated

[07:17/11:03:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:03:52] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/11:03:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:03:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:03:52] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/11:03:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:04:21] Adobe Reader Protected Mode Logging Initiated

[07:17/11:04:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:04:21] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/11:04:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:04:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:04:21] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/11:04:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:04:31] Adobe Reader Protected Mode Logging Initiated

[07:17/11:04:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:04:31] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/11:04:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:04:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:04:31] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/11:04:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:07:48] Adobe Reader Protected Mode Logging Initiated

[07:17/11:07:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:07:48] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/11:07:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:07:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:07:48] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/11:07:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:09:26] Adobe Reader Protected Mode Logging Initiated

[07:17/11:09:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:09:26] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/11:09:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:09:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:09:26] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/11:09:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:19:10] Adobe Reader Protected Mode Logging Initiated

[07:17/11:19:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:19:10] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/11:19:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:19:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:19:10] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/11:19:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:19:12] Adobe Reader Protected Mode Logging Initiated

[07:17/11:19:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:19:13] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/11:19:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:19:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:19:13] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/11:19:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:20:27] Adobe Reader Protected Mode Logging Initiated

[07:17/11:20:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:20:27] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/11:20:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:20:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:20:27] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/11:20:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:44] Adobe Reader Protected Mode Logging Initiated

[07:17/11:29:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:45] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/11:29:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:45] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/11:29:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:45] NtCreateMutant: STATUS_ACCESS_DENIED

[07:17/11:29:45] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:17/11:29:45] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:17/11:29:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:45] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:17/11:29:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:45] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:17/11:29:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:46] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:29:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:46] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:29:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:46] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:29:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:46] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:29:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:29:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:29:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:29:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:47] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:29:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:47] OpenEvent: STATUS_ACCESS_DENIED

[07:17/11:29:47] name: Global\BFE_Notify_Event_{d2e087cf-2d19-4223-88dc-2660be3dfe2a}

[07:17/11:29:47] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:17/11:29:47] NtCreateMutant: STATUS_ACCESS_DENIED

[07:17/11:29:47] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:17/11:29:47] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:17/11:29:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:47] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:17/11:29:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:47] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:17/11:29:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:47] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:17/11:29:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:47] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:17/11:29:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:47] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:17/11:29:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:47] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:17/11:29:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:29:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:29:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:29:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:29:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:29:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:29:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:02] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:03] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:11] Adobe Reader Protected Mode Logging Initiated

[07:17/11:30:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:11] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/11:30:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:11] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/11:30:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:11] NtCreateMutant: STATUS_ACCESS_DENIED

[07:17/11:30:11] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:17/11:30:11] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:17/11:30:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:11] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:17/11:30:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:11] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:17/11:30:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:11] OpenEvent: STATUS_ACCESS_DENIED

[07:17/11:30:11] name: Global\BFE_Notify_Event_{09284339-9ddc-4c57-b619-3d7c5a81ce7f}

[07:17/11:30:11] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:17/11:30:12] NtCreateMutant: STATUS_ACCESS_DENIED

[07:17/11:30:12] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:17/11:30:12] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:17/11:30:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:12] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:17/11:30:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:12] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:17/11:30:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:12] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:17/11:30:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:12] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:17/11:30:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:12] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:17/11:30:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:12] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:17/11:30:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:29] Adobe Reader Protected Mode Logging Initiated

[07:17/11:30:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:29] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/11:30:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:29] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/11:30:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:29] NtCreateMutant: STATUS_ACCESS_DENIED

[07:17/11:30:29] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:17/11:30:29] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:17/11:30:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:29] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:17/11:30:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:29] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:17/11:30:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:30] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:30] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:30] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:30] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:30] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:30] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:30] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:30] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:30] OpenEvent: STATUS_ACCESS_DENIED

[07:17/11:30:30] name: Global\BFE_Notify_Event_{a80dd630-ea4a-4273-a604-9135d8dcfc56}

[07:17/11:30:30] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:17/11:30:31] NtCreateMutant: STATUS_ACCESS_DENIED

[07:17/11:30:31] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:17/11:30:31] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:17/11:30:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:31] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:17/11:30:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:31] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:17/11:30:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:31] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:17/11:30:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:31] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:17/11:30:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:31] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:17/11:30:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:31] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:17/11:30:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/11:30:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/11:30:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/11:30:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/12:41:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/12:41:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/12:41:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/12:41:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/12:41:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/12:41:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/12:41:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/12:41:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/12:41:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/12:41:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/12:41:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/12:41:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/12:41:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/12:41:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/12:41:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/12:41:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/12:41:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/12:41:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/12:41:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/12:41:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/12:41:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/12:41:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/12:41:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/12:41:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/12:41:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/12:41:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/12:41:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/12:41:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/12:41:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/12:41:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/12:41:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/12:41:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/12:41:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/12:41:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/12:41:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/12:41:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/12:41:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/12:41:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/12:41:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/12:41:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/12:41:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/12:41:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/12:41:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/12:41:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/12:41:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/12:41:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/12:41:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/12:41:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/14:06:17] Adobe Reader Protected Mode Logging Initiated

[07:17/14:06:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/14:06:17] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/14:06:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/14:06:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/14:06:17] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/14:06:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/14:06:29] Adobe Reader Protected Mode Logging Initiated

[07:17/14:06:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/14:06:29] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/14:06:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/14:06:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/14:06:29] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/14:06:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/14:06:59] Adobe Reader Protected Mode Logging Initiated

[07:17/14:07:00] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/14:07:00] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/14:07:00] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/14:07:00] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/14:07:00] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/14:07:00] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/14:07:00] OpenEvent: STATUS_ACCESS_DENIED

[07:17/14:07:00] name: MSFT.VSA.COM.DISABLE.5880

[07:17/14:07:00] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:17/14:07:00] OpenEvent: STATUS_ACCESS_DENIED

[07:17/14:07:00] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:17/14:07:00] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:17/14:14:28] Adobe Reader Protected Mode Logging Initiated

[07:17/14:14:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/14:14:28] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/14:14:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/14:14:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/14:14:28] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/14:14:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/14:14:28] OpenEvent: STATUS_ACCESS_DENIED

[07:17/14:14:28] name: MSFT.VSA.COM.DISABLE.4740

[07:17/14:14:28] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:17/14:14:28] OpenEvent: STATUS_ACCESS_DENIED

[07:17/14:14:28] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:17/14:14:28] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:17/16:20:53] Adobe Reader Protected Mode Logging Initiated

[07:17/16:20:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:54] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/16:20:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:54] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/16:20:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:54] NtCreateMutant: STATUS_ACCESS_DENIED

[07:17/16:20:54] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:17/16:20:54] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:17/16:20:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:54] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:17/16:20:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:54] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:17/16:20:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:55] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:20:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:55] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:20:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:55] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:20:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:55] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:20:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:55] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:20:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:55] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:20:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:55] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:20:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:55] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:20:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:55] OpenEvent: STATUS_ACCESS_DENIED

[07:17/16:20:55] name: Global\BFE_Notify_Event_{327627ce-add0-4616-b883-ac4b5694f58e}

[07:17/16:20:55] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:17/16:20:55] NtCreateMutant: STATUS_ACCESS_DENIED

[07:17/16:20:55] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:17/16:20:55] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:17/16:20:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:55] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:17/16:20:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:55] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:17/16:20:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:55] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:17/16:20:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:55] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:17/16:20:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:55] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:17/16:20:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:55] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:17/16:20:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:20:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:20:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:20:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:20:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:20:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:20:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:21:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:21:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:21:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:21:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:21:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:21:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:21:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:21:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:21:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:21:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:21:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:21:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:21:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:21:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:21:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:21:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:21:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:21:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:21:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:21:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:21:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:21:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:21:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:21:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:21:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:21:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:21:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:21:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:21:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:21:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:21:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:21:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:21:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:21:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:21:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:21:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:21:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:21:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:21:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:21:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:21:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:21:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:21:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:21:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:21:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/16:21:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/16:21:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/16:21:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/17:01:47] Adobe Reader Protected Mode Logging Initiated

[07:17/17:01:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/17:01:47] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/17:01:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/17:01:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/17:01:47] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/17:01:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/17:01:47] OpenEvent: STATUS_ACCESS_DENIED

[07:17/17:01:47] name: MSFT.VSA.COM.DISABLE.3968

[07:17/17:01:47] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:17/17:01:47] OpenEvent: STATUS_ACCESS_DENIED

[07:17/17:01:47] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:17/17:01:47] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:17/17:04:05] Adobe Reader Protected Mode Logging Initiated

[07:17/17:04:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/17:04:05] real path: \REGISTRY\MACHINE\Software\Adobe

[07:17/17:04:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/17:04:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/17:04:05] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:17/17:04:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/17:04:05] OpenEvent: STATUS_ACCESS_DENIED

[07:17/17:04:05] name: MSFT.VSA.COM.DISABLE.5136

[07:17/17:04:05] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:17/17:04:05] OpenEvent: STATUS_ACCESS_DENIED

[07:17/17:04:05] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:17/17:04:05] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:17/17:04:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/17:04:18] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/17:04:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/17:04:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/17:04:18] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/17:04:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/17:04:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/17:04:18] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/17:04:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/17:04:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/17:04:18] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/17:04:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/17:04:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/17:04:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/17:04:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/17:04:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/17:04:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/17:04:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/17:04:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/17:04:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/17:04:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/17:04:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/17:04:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/17:04:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/17:04:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/17:04:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/17:04:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/17:04:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/17:04:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/17:04:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/17:04:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/17:04:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/17:04:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:17/17:04:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:17/17:04:34] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:17/17:04:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/08:29:13] Adobe Reader Protected Mode Logging Initiated

[07:18/08:29:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/08:29:13] real path: \REGISTRY\MACHINE\Software\Adobe

[07:18/08:29:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/08:29:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/08:29:13] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:18/08:29:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:27:46] Adobe Reader Protected Mode Logging Initiated

[07:18/09:27:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:27:46] real path: \REGISTRY\MACHINE\Software\Adobe

[07:18/09:27:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:27:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:27:46] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:18/09:27:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:27:48] Adobe Reader Protected Mode Logging Initiated

[07:18/09:27:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:27:48] real path: \REGISTRY\MACHINE\Software\Adobe

[07:18/09:27:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:27:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:27:48] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:18/09:27:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:27:48] Adobe Reader Protected Mode Logging Initiated

[07:18/09:27:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:27:49] real path: \REGISTRY\MACHINE\Software\Adobe

[07:18/09:27:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:27:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:27:49] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:18/09:27:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:27:49] OpenEvent: STATUS_ACCESS_DENIED

[07:18/09:27:49] name: MSFT.VSA.COM.DISABLE.6788

[07:18/09:27:49] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:18/09:27:49] OpenEvent: STATUS_ACCESS_DENIED

[07:18/09:27:49] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:18/09:27:49] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:18/09:28:06] Adobe Reader Protected Mode Logging Initiated

[07:18/09:28:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:28:06] real path: \REGISTRY\MACHINE\Software\Adobe

[07:18/09:28:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:28:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:28:06] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:18/09:28:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:28:45] Adobe Reader Protected Mode Logging Initiated

[07:18/09:28:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:28:45] real path: \REGISTRY\MACHINE\Software\Adobe

[07:18/09:28:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:28:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:28:45] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:18/09:28:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:30:28] Adobe Reader Protected Mode Logging Initiated

[07:18/09:30:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:30:28] real path: \REGISTRY\MACHINE\Software\Adobe

[07:18/09:30:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:30:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:30:28] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:18/09:30:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:30:30] Adobe Reader Protected Mode Logging Initiated

[07:18/09:30:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:30:30] real path: \REGISTRY\MACHINE\Software\Adobe

[07:18/09:30:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:30:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:30:30] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:18/09:30:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:30:30] OpenEvent: STATUS_ACCESS_DENIED

[07:18/09:30:30] name: MSFT.VSA.COM.DISABLE.5996

[07:18/09:30:30] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:18/09:30:30] OpenEvent: STATUS_ACCESS_DENIED

[07:18/09:30:30] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:18/09:30:30] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:18/09:30:30] Adobe Reader Protected Mode Logging Initiated

[07:18/09:30:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:30:30] real path: \REGISTRY\MACHINE\Software\Adobe

[07:18/09:30:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:30:30] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:30:30] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:18/09:30:30] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:39:33] Adobe Reader Protected Mode Logging Initiated

[07:18/09:39:33] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:39:33] real path: \REGISTRY\MACHINE\Software\Adobe

[07:18/09:39:33] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/09:39:33] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/09:39:33] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:18/09:39:33] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/11:34:00] Adobe Reader Protected Mode Logging Initiated

[07:18/11:34:00] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/11:34:00] real path: \REGISTRY\MACHINE\Software\Adobe

[07:18/11:34:00] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/11:34:00] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/11:34:00] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:18/11:34:00] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/11:35:20] Adobe Reader Protected Mode Logging Initiated

[07:18/11:35:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/11:35:20] real path: \REGISTRY\MACHINE\Software\Adobe

[07:18/11:35:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/11:35:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/11:35:20] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:18/11:35:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/11:35:20] NtCreateMutant: STATUS_ACCESS_DENIED

[07:18/11:35:20] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:18/11:35:20] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:18/11:35:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/11:35:20] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:18/11:35:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:18/11:35:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:18/11:35:20] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:18/11:35:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/08:41:40] Adobe Reader Protected Mode Logging Initiated

[07:19/08:41:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/08:41:40] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/08:41:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/08:41:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/08:41:40] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/08:41:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:42:20] Adobe Reader Protected Mode Logging Initiated

[07:19/12:42:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:42:20] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/12:42:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:42:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:42:20] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/12:42:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:42:40] Adobe Reader Protected Mode Logging Initiated

[07:19/12:42:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:42:40] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/12:42:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:42:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:42:40] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/12:42:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:42:40] Adobe Reader Protected Mode Logging Initiated

[07:19/12:42:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:42:40] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/12:42:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:42:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:42:40] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/12:42:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:42:40] OpenEvent: STATUS_ACCESS_DENIED

[07:19/12:42:40] name: MSFT.VSA.COM.DISABLE.6652

[07:19/12:42:40] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:19/12:42:40] OpenEvent: STATUS_ACCESS_DENIED

[07:19/12:42:40] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:19/12:42:40] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:19/12:43:08] Adobe Reader Protected Mode Logging Initiated

[07:19/12:43:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:43:08] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/12:43:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:43:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:43:08] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/12:43:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:43:11] Adobe Reader Protected Mode Logging Initiated

[07:19/12:43:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:43:11] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/12:43:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:43:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:43:11] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/12:43:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:43:15] Adobe Reader Protected Mode Logging Initiated

[07:19/12:43:16] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:43:16] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/12:43:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:43:16] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:43:16] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/12:43:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:43:21] Adobe Reader Protected Mode Logging Initiated

[07:19/12:43:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:43:21] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/12:43:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:43:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:43:21] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/12:43:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:43:25] Adobe Reader Protected Mode Logging Initiated

[07:19/12:43:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:43:25] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/12:43:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:43:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:43:25] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/12:43:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:43:46] Adobe Reader Protected Mode Logging Initiated

[07:19/12:43:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:43:46] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/12:43:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:43:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:43:46] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/12:43:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:43:58] Adobe Reader Protected Mode Logging Initiated

[07:19/12:43:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:43:58] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/12:43:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:43:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:43:58] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/12:43:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:44:00] Adobe Reader Protected Mode Logging Initiated

[07:19/12:44:00] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:44:00] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/12:44:00] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/12:44:00] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/12:44:00] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/12:44:00] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/14:49:20] Adobe Reader Protected Mode Logging Initiated

[07:19/14:49:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/14:49:21] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/14:49:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/14:49:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/14:49:21] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/14:49:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/14:57:09] Adobe Reader Protected Mode Logging Initiated

[07:19/14:57:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/14:57:09] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/14:57:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/14:57:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/14:57:09] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/14:57:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/15:32:55] Adobe Reader Protected Mode Logging Initiated

[07:19/15:32:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/15:32:55] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/15:32:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/15:32:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/15:32:55] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/15:32:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/15:37:51] Adobe Reader Protected Mode Logging Initiated

[07:19/15:37:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/15:37:51] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/15:37:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/15:37:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/15:37:51] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/15:37:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/15:38:43] Adobe Reader Protected Mode Logging Initiated

[07:19/15:38:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/15:38:43] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/15:38:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/15:38:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/15:38:43] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/15:38:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/15:40:46] Adobe Reader Protected Mode Logging Initiated

[07:19/15:40:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/15:40:46] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/15:40:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/15:40:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/15:40:46] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/15:40:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/15:46:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/15:46:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/15:46:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/15:46:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/15:46:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/15:46:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/15:46:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/15:46:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/15:46:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/15:46:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/15:46:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/15:46:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/15:46:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/15:46:08] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/15:46:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/15:46:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/15:46:08] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/15:46:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/15:46:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/15:46:08] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/15:46:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/15:46:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/15:46:08] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/15:46:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:42:57] NtCreateMutant: STATUS_ACCESS_DENIED

[07:19/16:42:57] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:19/16:42:57] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:19/16:42:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:42:57] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:19/16:42:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:42:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:42:57] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:19/16:42:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:43:04] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:43:04] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/16:43:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:43:04] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:43:04] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/16:43:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:43:04] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:43:04] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/16:43:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:43:04] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:43:04] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/16:43:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:52:15] Adobe Reader Protected Mode Logging Initiated

[07:19/16:52:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:52:15] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/16:52:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:52:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:52:15] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/16:52:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:52:18] Adobe Reader Protected Mode Logging Initiated

[07:19/16:52:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:52:18] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/16:52:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:52:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:52:18] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/16:52:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:52:22] Adobe Reader Protected Mode Logging Initiated

[07:19/16:52:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:52:22] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/16:52:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:52:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:52:22] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/16:52:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:52:24] Adobe Reader Protected Mode Logging Initiated

[07:19/16:52:25] Adobe Reader Protected Mode Logging Initiated

[07:19/16:52:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:52:25] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/16:52:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:52:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:52:25] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/16:52:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:52:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:52:25] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/16:52:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:52:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:52:25] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/16:52:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:52:25] OpenEvent: STATUS_ACCESS_DENIED

[07:19/16:52:25] name: MSFT.VSA.COM.DISABLE.6820

[07:19/16:52:25] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:19/16:52:25] OpenEvent: STATUS_ACCESS_DENIED

[07:19/16:52:25] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:19/16:52:25] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:19/16:52:39] Adobe Reader Protected Mode Logging Initiated

[07:19/16:52:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:52:40] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/16:52:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:52:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:52:40] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/16:52:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:57:06] Adobe Reader Protected Mode Logging Initiated

[07:19/16:57:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:57:06] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/16:57:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:57:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:57:06] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/16:57:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:57:15] Adobe Reader Protected Mode Logging Initiated

[07:19/16:57:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:57:15] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/16:57:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:57:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:57:15] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/16:57:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:57:36] Adobe Reader Protected Mode Logging Initiated

[07:19/16:57:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:57:36] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/16:57:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:57:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:57:36] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/16:57:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:57:38] Adobe Reader Protected Mode Logging Initiated

[07:19/16:57:38] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:57:38] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/16:57:38] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/16:57:38] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/16:57:38] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/16:57:38] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:00:45] Adobe Reader Protected Mode Logging Initiated

[07:19/17:00:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:00:45] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/17:00:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:00:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:00:45] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/17:00:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:16:55] Adobe Reader Protected Mode Logging Initiated

[07:19/17:16:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:16:55] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/17:16:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:16:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:16:55] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/17:16:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:16:57] Adobe Reader Protected Mode Logging Initiated

[07:19/17:16:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:16:57] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/17:16:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:16:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:16:57] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/17:16:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:06] OpenEvent: STATUS_ACCESS_DENIED

[07:19/17:18:06] name: Global\BFE_Notify_Event_{4f73b152-1abf-4817-b6eb-03ee909d7f7a}

[07:19/17:18:06] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:19/17:18:12] Adobe Reader Protected Mode Logging Initiated

[07:19/17:18:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:13] real path: \REGISTRY\MACHINE\Software\Adobe

[07:19/17:18:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:13] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:19/17:18:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:13] OpenEvent: STATUS_ACCESS_DENIED

[07:19/17:18:13] name: MSFT.VSA.COM.DISABLE.8184

[07:19/17:18:13] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:19/17:18:13] OpenEvent: STATUS_ACCESS_DENIED

[07:19/17:18:13] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:19/17:18:13] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:19/17:18:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:18] OpenEvent: STATUS_ACCESS_DENIED

[07:19/17:18:18] name: Global\BFE_Notify_Event_{dcbb467e-7a5d-410b-a17a-824dc94f6607}

[07:19/17:18:18] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:19/17:18:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:18:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:18:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:18:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:25:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:25:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:25:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:25:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:25:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:25:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:25:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:25:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:25:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:25:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:25:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:25:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:25:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:25:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:25:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:25:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:25:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:25:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:25:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:25:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:25:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:25:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:25:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:25:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:25:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:25:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:25:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:25:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:25:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:25:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:25:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:25:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:25:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:25:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:25:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:25:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:25:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:25:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:25:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:25:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:25:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:25:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:25:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:25:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:25:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:19/17:25:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:19/17:25:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:19/17:25:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/08:40:27] Adobe Reader Protected Mode Logging Initiated

[07:20/08:40:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/08:40:28] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/08:40:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/08:40:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/08:40:28] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/08:40:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/08:48:09] Adobe Reader Protected Mode Logging Initiated

[07:20/08:48:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/08:48:10] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/08:48:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/08:48:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/08:48:10] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/08:48:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:21:03] Adobe Reader Protected Mode Logging Initiated

[07:20/10:21:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:21:03] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/10:21:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:21:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:21:03] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/10:21:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:21:03] OpenEvent: STATUS_ACCESS_DENIED

[07:20/10:21:03] name: MSFT.VSA.COM.DISABLE.7656

[07:20/10:21:03] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:20/10:21:03] OpenEvent: STATUS_ACCESS_DENIED

[07:20/10:21:03] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:20/10:21:03] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:20/10:21:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:21:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:21:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:21:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:21:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:21:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:21:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:21:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:21:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:21:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:21:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:21:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:23:24] Adobe Reader Protected Mode Logging Initiated

[07:20/10:24:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:24:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:24:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:24:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:24:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:24:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:24:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:24:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:24:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:24:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:24:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:24:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:24:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:24:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:24:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:24:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:24:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:24:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:24:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:24:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:24:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:24:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:24:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:24:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:53:16] Adobe Reader Protected Mode Logging Initiated

[07:20/10:53:16] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:53:16] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/10:53:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:53:16] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:53:16] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/10:53:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:53:37] Adobe Reader Protected Mode Logging Initiated

[07:20/10:53:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:53:37] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/10:53:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:53:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:53:37] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/10:53:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:53:56] Adobe Reader Protected Mode Logging Initiated

[07:20/10:53:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:53:56] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/10:53:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:53:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:53:56] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/10:53:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:54:55] Adobe Reader Protected Mode Logging Initiated

[07:20/10:54:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:54:55] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/10:54:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:54:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:54:55] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/10:54:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:54:55] OpenEvent: STATUS_ACCESS_DENIED

[07:20/10:54:55] name: MSFT.VSA.COM.DISABLE.2524

[07:20/10:54:55] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:20/10:54:55] OpenEvent: STATUS_ACCESS_DENIED

[07:20/10:54:55] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:20/10:54:55] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:20/10:54:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:54:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:54:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:54:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:54:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:54:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:54:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:54:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:54:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:54:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:54:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:54:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:54:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:54:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:54:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:54:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:54:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:54:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:54:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:54:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:54:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:54:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:54:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:54:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:54:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:54:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:54:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:54:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:54:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:54:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:54:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:54:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:54:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/10:54:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/10:54:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/10:54:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/11:08:40] Adobe Reader Protected Mode Logging Initiated

[07:20/11:08:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/11:08:40] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/11:08:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/11:08:40] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/11:08:40] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/11:08:40] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/11:08:44] Adobe Reader Protected Mode Logging Initiated

[07:20/11:08:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/11:08:44] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/11:08:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/11:08:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/11:08:44] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/11:08:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/11:08:46] Adobe Reader Protected Mode Logging Initiated

[07:20/11:08:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/11:08:47] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/11:08:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/11:08:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/11:08:47] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/11:08:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/11:11:08] Adobe Reader Protected Mode Logging Initiated

[07:20/11:11:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/11:11:08] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/11:11:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/11:11:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/11:11:08] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/11:11:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/11:24:03] Adobe Reader Protected Mode Logging Initiated

[07:20/11:24:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/11:24:03] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/11:24:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/11:24:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/11:24:03] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/11:24:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/11:24:03] NtCreateMutant: STATUS_ACCESS_DENIED

[07:20/11:24:03] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:20/11:24:03] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:20/11:24:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/11:24:03] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:20/11:24:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/11:24:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/11:24:03] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:20/11:24:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:21] Adobe Reader Protected Mode Logging Initiated

[07:20/14:46:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:21] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/14:46:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:21] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/14:46:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:21] NtCreateMutant: STATUS_ACCESS_DENIED

[07:20/14:46:21] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:20/14:46:21] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:20/14:46:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:21] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:20/14:46:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:21] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:20/14:46:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:23] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:23] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:23] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:23] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:23] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:23] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:23] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:23] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:23] OpenEvent: STATUS_ACCESS_DENIED

[07:20/14:46:23] name: Global\BFE_Notify_Event_{046078d5-22cd-4722-b80b-3fb7af41c62d}

[07:20/14:46:23] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:20/14:46:24] NtCreateMutant: STATUS_ACCESS_DENIED

[07:20/14:46:24] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:20/14:46:24] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:20/14:46:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:24] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:20/14:46:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:24] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:20/14:46:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:24] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:20/14:46:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:24] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:20/14:46:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:24] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:20/14:46:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:24] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:20/14:46:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/14:46:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/14:46:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/14:46:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:46:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:46:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/15:46:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:46:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:46:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/15:46:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:46:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:46:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/15:46:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:46:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:46:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/15:46:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:46:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:46:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/15:46:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:46:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:46:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/15:46:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:46:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:46:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/15:46:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:46:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:46:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/15:46:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:46:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:46:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/15:46:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:46:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:46:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/15:46:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:46:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:46:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/15:46:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:46:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:46:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/15:46:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:46:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:46:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/15:46:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:46:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:46:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/15:46:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:46:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:46:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/15:46:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:46:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:46:37] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/15:46:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:55:19] Adobe Reader Protected Mode Logging Initiated

[07:20/15:55:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:55:19] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/15:55:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/15:55:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/15:55:19] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/15:55:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/16:51:35] Adobe Reader Protected Mode Logging Initiated

[07:20/16:51:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/16:51:35] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/16:51:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/16:51:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/16:51:35] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/16:51:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/16:51:35] OpenEvent: STATUS_ACCESS_DENIED

[07:20/16:51:35] name: MSFT.VSA.COM.DISABLE.3872

[07:20/16:51:35] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:20/16:51:35] OpenEvent: STATUS_ACCESS_DENIED

[07:20/16:51:35] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:20/16:51:35] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:20/16:56:40] Adobe Reader Protected Mode Logging Initiated

[07:20/17:00:12] Adobe Reader Protected Mode Logging Initiated

[07:20/17:00:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:00:12] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/17:00:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:00:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:00:12] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/17:00:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:12] Adobe Reader Protected Mode Logging Initiated

[07:20/17:06:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:12] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/17:06:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:12] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/17:06:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:13] NtCreateMutant: STATUS_ACCESS_DENIED

[07:20/17:06:13] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:20/17:06:13] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:20/17:06:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:13] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:20/17:06:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:13] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:20/17:06:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:06:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:06:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:06:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:06:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:06:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:06:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:06:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:06:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:14] OpenEvent: STATUS_ACCESS_DENIED

[07:20/17:06:14] name: Global\BFE_Notify_Event_{1d1fcd74-1abc-4673-a309-ef61fb76310a}

[07:20/17:06:14] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:20/17:06:14] NtCreateMutant: STATUS_ACCESS_DENIED

[07:20/17:06:14] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:20/17:06:14] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:20/17:06:14] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:14] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:20/17:06:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:14] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:14] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:20/17:06:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:14] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:14] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:20/17:06:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:14] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:14] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:20/17:06:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:14] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:14] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:20/17:06:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:14] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:14] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:20/17:06:14] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:06:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:06:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:06:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:06:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:06:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:06:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:07:07] Adobe Reader Protected Mode Logging Initiated

[07:20/17:07:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:07:07] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/17:07:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:07:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:07:07] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/17:07:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:07:22] Adobe Reader Protected Mode Logging Initiated

[07:20/17:07:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:07:23] real path: \REGISTRY\MACHINE\Software\Adobe

[07:20/17:07:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:07:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:07:23] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:20/17:07:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:16:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:16:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:16:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:16:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:16:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:16:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:16:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:16:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:16:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:16:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:16:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:16:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:16:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:16:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:16:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:16:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:16:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:16:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:16:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:16:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:16:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:16:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:16:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:16:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:16:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:16:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:16:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:16:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:16:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:16:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:16:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:16:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:16:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:16:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:16:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:16:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:16:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:16:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:16:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:16:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:16:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:16:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:16:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:16:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:16:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:20/17:16:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:20/17:16:48] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:20/17:16:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:22:52] Adobe Reader Protected Mode Logging Initiated

[07:23/07:22:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:22:54] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/07:22:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:22:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:22:54] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/07:22:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:42:44] Adobe Reader Protected Mode Logging Initiated

[07:23/07:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:42:44] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/07:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:42:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:42:44] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/07:42:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:42:50] Adobe Reader Protected Mode Logging Initiated

[07:23/07:42:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:42:50] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/07:42:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:42:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:42:50] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/07:42:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:49] Adobe Reader Protected Mode Logging Initiated

[07:23/07:57:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:49] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/07:57:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:49] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/07:57:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:49] NtCreateMutant: STATUS_ACCESS_DENIED

[07:23/07:57:49] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:23/07:57:49] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:23/07:57:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:49] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:23/07:57:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:49] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:23/07:57:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/07:57:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/07:57:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/07:57:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/07:57:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/07:57:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/07:57:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/07:57:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/07:57:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:53] OpenEvent: STATUS_ACCESS_DENIED

[07:23/07:57:53] name: Global\BFE_Notify_Event_{45a62997-51e4-4401-837e-55ea5f0cf7cb}

[07:23/07:57:53] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/07:57:53] NtCreateMutant: STATUS_ACCESS_DENIED

[07:23/07:57:53] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:23/07:57:53] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:23/07:57:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:53] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:23/07:57:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:53] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:23/07:57:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:53] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:23/07:57:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:53] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:23/07:57:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:53] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:23/07:57:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:53] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:23/07:57:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:54] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/07:57:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:54] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/07:57:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:54] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/07:57:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/07:57:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/07:57:54] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/07:57:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/08:54:03] Adobe Reader Protected Mode Logging Initiated

[07:23/08:54:04] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/08:54:04] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/08:54:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/08:54:04] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/08:54:04] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/08:54:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/08:54:04] OpenEvent: STATUS_ACCESS_DENIED

[07:23/08:54:04] name: MSFT.VSA.COM.DISABLE.8124

[07:23/08:54:04] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/08:54:04] OpenEvent: STATUS_ACCESS_DENIED

[07:23/08:54:04] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:23/08:54:04] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/08:55:23] Adobe Reader Protected Mode Logging Initiated

[07:23/08:55:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/08:55:23] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/08:55:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/08:55:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/08:55:23] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/08:55:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/08:55:26] Adobe Reader Protected Mode Logging Initiated

[07:23/08:55:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/08:55:26] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/08:55:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/08:55:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/08:55:26] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/08:55:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/08:55:28] Adobe Reader Protected Mode Logging Initiated

[07:23/08:55:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/08:55:28] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/08:55:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/08:55:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/08:55:28] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/08:55:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/08:55:28] OpenEvent: STATUS_ACCESS_DENIED

[07:23/08:55:28] name: MSFT.VSA.COM.DISABLE.6152

[07:23/08:55:28] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/08:55:28] OpenEvent: STATUS_ACCESS_DENIED

[07:23/08:55:28] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:23/08:55:28] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/09:00:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:00:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:00:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:00:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:00:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:00:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:00:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:00:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:00:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:00:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:00:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:00:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:00:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:00:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:00:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:00:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:00:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:00:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:00:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:00:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:00:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:00:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:00:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:00:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:00:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:00:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:00:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:00:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:00:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:00:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:00:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:00:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:00:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:00:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:00:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:00:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:00:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:00:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:00:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:00:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:00:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:00:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:00:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:00:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:00:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:00:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:00:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:00:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:16:03] Adobe Reader Protected Mode Logging Initiated

[07:23/09:16:04] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:16:04] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/09:16:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:16:04] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:16:04] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/09:16:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:16:04] OpenEvent: STATUS_ACCESS_DENIED

[07:23/09:16:04] name: MSFT.VSA.COM.DISABLE.8100

[07:23/09:16:04] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/09:16:04] OpenEvent: STATUS_ACCESS_DENIED

[07:23/09:16:04] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:23/09:16:04] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/09:18:46] Adobe Reader Protected Mode Logging Initiated

[07:23/09:18:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:18:46] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/09:18:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:18:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:18:46] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/09:18:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:18:46] OpenEvent: STATUS_ACCESS_DENIED

[07:23/09:18:46] name: MSFT.VSA.COM.DISABLE.1288

[07:23/09:18:46] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/09:18:46] OpenEvent: STATUS_ACCESS_DENIED

[07:23/09:18:46] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:23/09:18:46] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/09:31:16] Adobe Reader Protected Mode Logging Initiated

[07:23/09:31:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:31:17] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/09:31:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:31:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:31:17] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/09:31:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:31:32] Adobe Reader Protected Mode Logging Initiated

[07:23/09:31:33] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:31:33] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/09:31:33] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:31:33] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:31:33] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/09:31:33] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:43] Adobe Reader Protected Mode Logging Initiated

[07:23/09:33:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:43] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/09:33:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:43] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/09:33:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:45] Adobe Reader Protected Mode Logging Initiated

[07:23/09:33:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:46] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/09:33:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:46] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/09:33:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:48] Adobe Reader Protected Mode Logging Initiated

[07:23/09:33:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:49] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/09:33:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:49] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:49] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/09:33:49] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:52] Adobe Reader Protected Mode Logging Initiated

[07:23/09:33:52] Adobe Reader Protected Mode Logging Initiated

[07:23/09:33:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:52] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/09:33:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:52] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/09:33:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:53] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/09:33:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:53] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/09:33:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:53] OpenEvent: STATUS_ACCESS_DENIED

[07:23/09:33:53] name: MSFT.VSA.COM.DISABLE.6232

[07:23/09:33:53] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/09:33:53] OpenEvent: STATUS_ACCESS_DENIED

[07:23/09:33:53] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:23/09:33:53] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/09:33:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:33:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:33:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:33:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:33:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:54] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:33:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:54] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:33:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:54] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:33:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:54] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:33:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:57] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:33:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:57] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:33:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:57] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:33:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:57] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:33:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:57] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:33:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:57] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:33:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:57] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:33:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:57] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/09:33:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:58] Adobe Reader Protected Mode Logging Initiated

[07:23/09:33:58] Adobe Reader Protected Mode Logging Initiated

[07:23/09:33:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:58] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/09:33:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:58] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/09:33:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:58] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/09:33:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/09:33:58] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/09:33:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/09:33:58] OpenEvent: STATUS_ACCESS_DENIED

[07:23/09:33:58] name: MSFT.VSA.COM.DISABLE.3752

[07:23/09:33:58] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/09:33:58] OpenEvent: STATUS_ACCESS_DENIED

[07:23/09:33:58] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:23/09:33:58] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/10:38:02] Adobe Reader Protected Mode Logging Initiated

[07:23/10:38:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/10:38:02] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/10:38:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/10:38:02] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/10:38:02] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/10:38:02] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/10:39:52] Adobe Reader Protected Mode Logging Initiated

[07:23/10:39:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/10:39:52] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/10:39:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/10:39:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/10:39:52] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/10:39:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/10:40:35] Adobe Reader Protected Mode Logging Initiated

[07:23/10:40:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/10:40:35] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/10:40:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/10:40:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/10:40:35] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/10:40:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/10:40:35] OpenEvent: STATUS_ACCESS_DENIED

[07:23/10:40:35] name: MSFT.VSA.COM.DISABLE.6904

[07:23/10:40:35] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/10:40:35] OpenEvent: STATUS_ACCESS_DENIED

[07:23/10:40:35] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:23/10:40:35] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/10:48:56] Adobe Reader Protected Mode Logging Initiated

[07:23/10:48:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/10:48:56] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/10:48:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/10:48:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/10:48:56] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/10:48:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/10:48:56] OpenEvent: STATUS_ACCESS_DENIED

[07:23/10:48:56] name: MSFT.VSA.COM.DISABLE.4340

[07:23/10:48:56] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/10:48:56] OpenEvent: STATUS_ACCESS_DENIED

[07:23/10:48:56] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:23/10:48:56] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/11:24:06] Adobe Reader Protected Mode Logging Initiated

[07:23/11:24:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:06] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/11:24:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:06] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/11:24:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:06] NtCreateMutant: STATUS_ACCESS_DENIED

[07:23/11:24:06] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:23/11:24:06] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:23/11:24:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:06] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:23/11:24:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:06] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:23/11:24:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/11:24:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/11:24:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/11:24:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/11:24:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/11:24:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/11:24:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/11:24:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/11:24:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:07] OpenEvent: STATUS_ACCESS_DENIED

[07:23/11:24:07] name: Global\BFE_Notify_Event_{e885f48c-f800-42ad-b314-1a278c0014a0}

[07:23/11:24:07] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/11:24:35] NtCreateMutant: STATUS_ACCESS_DENIED

[07:23/11:24:35] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:23/11:24:35] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:23/11:24:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:35] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:23/11:24:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:35] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:23/11:24:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:35] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:23/11:24:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:35] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:23/11:24:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:35] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:23/11:24:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:35] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:23/11:24:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/11:24:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/11:24:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/11:24:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/11:24:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/11:24:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/11:24:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:50:17] Adobe Reader Protected Mode Logging Initiated

[07:23/12:50:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:50:17] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/12:50:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:50:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:50:17] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/12:50:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:52:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:52:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/12:52:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:52:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:52:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/12:52:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:52:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:52:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/12:52:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:52:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:52:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/12:52:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:52:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:52:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/12:52:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:52:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:52:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/12:52:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:52:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:52:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/12:52:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:52:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:52:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/12:52:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:52:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:52:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/12:52:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:52:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:52:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/12:52:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:52:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:52:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/12:52:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:52:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:52:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/12:52:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:52:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:52:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/12:52:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:52:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:52:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/12:52:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:52:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:52:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/12:52:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/12:52:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/12:52:32] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/12:52:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:29:16] Adobe Reader Protected Mode Logging Initiated

[07:23/13:29:16] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:29:16] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/13:29:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:29:16] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:29:16] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/13:29:16] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:29:16] OpenEvent: STATUS_ACCESS_DENIED

[07:23/13:29:16] name: MSFT.VSA.COM.DISABLE.5228

[07:23/13:29:16] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/13:29:16] OpenEvent: STATUS_ACCESS_DENIED

[07:23/13:29:16] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:23/13:29:16] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/13:31:29] Adobe Reader Protected Mode Logging Initiated

[07:23/13:31:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:31:29] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/13:31:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:31:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:31:29] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/13:31:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:31:29] OpenEvent: STATUS_ACCESS_DENIED

[07:23/13:31:29] name: MSFT.VSA.COM.DISABLE.7912

[07:23/13:31:29] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/13:31:29] OpenEvent: STATUS_ACCESS_DENIED

[07:23/13:31:29] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:23/13:31:29] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/13:36:42] Adobe Reader Protected Mode Logging Initiated

[07:23/13:36:42] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:36:42] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/13:36:42] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:36:42] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:36:42] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/13:36:42] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:36:46] Adobe Reader Protected Mode Logging Initiated

[07:23/13:36:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:36:47] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/13:36:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:36:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:36:47] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/13:36:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:44:26] Adobe Reader Protected Mode Logging Initiated

[07:23/13:44:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:44:26] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/13:44:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:44:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:44:26] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/13:44:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:44:26] OpenEvent: STATUS_ACCESS_DENIED

[07:23/13:44:26] name: MSFT.VSA.COM.DISABLE.7328

[07:23/13:44:26] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/13:44:26] OpenEvent: STATUS_ACCESS_DENIED

[07:23/13:44:26] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:23/13:44:26] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/13:49:08] Adobe Reader Protected Mode Logging Initiated

[07:23/13:49:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:08] real path: \REGISTRY\MACHINE\Software\Adobe

[07:23/13:49:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:08] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:23/13:49:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:08] NtCreateMutant: STATUS_ACCESS_DENIED

[07:23/13:49:08] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:23/13:49:08] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:23/13:49:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:08] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:23/13:49:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:08] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:08] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:23/13:49:08] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:49:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:49:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:49:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:49:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:49:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:49:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:49:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:49:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:09] OpenEvent: STATUS_ACCESS_DENIED

[07:23/13:49:09] name: Global\BFE_Notify_Event_{8aa41141-5423-4c45-b6ce-5e997f913e58}

[07:23/13:49:09] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:23/13:49:09] NtCreateMutant: STATUS_ACCESS_DENIED

[07:23/13:49:09] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:23/13:49:09] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:23/13:49:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:09] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:23/13:49:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:09] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:23/13:49:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:09] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:23/13:49:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:09] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:23/13:49:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:09] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:23/13:49:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:09] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:23/13:49:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:10] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:49:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:10] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:49:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:10] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:49:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:49:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:49:10] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:49:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:59:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:59:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:59:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:59:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:59:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:59:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:59:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:59:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:59:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:59:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:59:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:59:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:59:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:59:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:59:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:23/13:59:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:23/13:59:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:23/13:59:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/08:27:53] Adobe Reader Protected Mode Logging Initiated

[07:24/08:27:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/08:27:53] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/08:27:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/08:27:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/08:27:53] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/08:27:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/08:34:17] Adobe Reader Protected Mode Logging Initiated

[07:24/08:34:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/08:34:17] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/08:34:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/08:34:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/08:34:17] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/08:34:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:53] Adobe Reader Protected Mode Logging Initiated

[07:24/09:33:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:54] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/09:33:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:54] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/09:33:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:54] NtCreateMutant: STATUS_ACCESS_DENIED

[07:24/09:33:54] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:24/09:33:54] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:24/09:33:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:54] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:24/09:33:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:54] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:24/09:33:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:55] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/09:33:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:55] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/09:33:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:55] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/09:33:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:55] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/09:33:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/09:33:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/09:33:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/09:33:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:56] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/09:33:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:56] OpenEvent: STATUS_ACCESS_DENIED

[07:24/09:33:56] name: Global\BFE_Notify_Event_{abae272d-99a0-4fd2-9e01-19e43539fa6a}

[07:24/09:33:56] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/09:33:57] NtCreateMutant: STATUS_ACCESS_DENIED

[07:24/09:33:57] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:24/09:33:57] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:24/09:33:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:57] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:24/09:33:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:57] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:24/09:33:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:57] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:24/09:33:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:57] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:24/09:33:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:57] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:24/09:33:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:57] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:24/09:33:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/09:33:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/09:33:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/09:33:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:33:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:33:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/09:33:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:37:06] Adobe Reader Protected Mode Logging Initiated

[07:24/09:37:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:37:06] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/09:37:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:37:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:37:06] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/09:37:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:37:11] Adobe Reader Protected Mode Logging Initiated

[07:24/09:37:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:37:11] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/09:37:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/09:37:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/09:37:11] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/09:37:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/11:23:55] Adobe Reader Protected Mode Logging Initiated

[07:24/11:23:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/11:23:55] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/11:23:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/11:23:55] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/11:23:55] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/11:23:55] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/11:35:35] Adobe Reader Protected Mode Logging Initiated

[07:24/11:35:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/11:35:36] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/11:35:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/11:35:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/11:35:36] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/11:35:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/11:35:36] OpenEvent: STATUS_ACCESS_DENIED

[07:24/11:35:36] name: MSFT.VSA.COM.DISABLE.5852

[07:24/11:35:36] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/11:35:36] OpenEvent: STATUS_ACCESS_DENIED

[07:24/11:35:36] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:24/11:35:36] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/11:37:29] Adobe Reader Protected Mode Logging Initiated

[07:24/11:37:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/11:37:29] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/11:37:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/11:37:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/11:37:29] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/11:37:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/11:37:29] OpenEvent: STATUS_ACCESS_DENIED

[07:24/11:37:29] name: MSFT.VSA.COM.DISABLE.7788

[07:24/11:37:29] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/11:37:29] OpenEvent: STATUS_ACCESS_DENIED

[07:24/11:37:29] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:24/11:37:29] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/11:59:19] Adobe Reader Protected Mode Logging Initiated

[07:24/11:59:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/11:59:19] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/11:59:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/11:59:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/11:59:19] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/11:59:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/11:59:23] Adobe Reader Protected Mode Logging Initiated

[07:24/11:59:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/11:59:23] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/11:59:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/11:59:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/11:59:23] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/11:59:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/11:59:31] Adobe Reader Protected Mode Logging Initiated

[07:24/11:59:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/11:59:32] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/11:59:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/11:59:32] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/11:59:32] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/11:59:32] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/12:00:57] Adobe Reader Protected Mode Logging Initiated

[07:24/12:00:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/12:00:57] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/12:00:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/12:00:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/12:00:57] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/12:00:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/12:00:57] OpenEvent: STATUS_ACCESS_DENIED

[07:24/12:00:57] name: MSFT.VSA.COM.DISABLE.5720

[07:24/12:00:57] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/12:00:57] OpenEvent: STATUS_ACCESS_DENIED

[07:24/12:00:57] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:24/12:00:57] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/14:17:03] Adobe Reader Protected Mode Logging Initiated

[07:24/14:17:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/14:17:03] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/14:17:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/14:17:03] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/14:17:03] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/14:17:03] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:14:29] Adobe Reader Protected Mode Logging Initiated

[07:24/16:14:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:14:29] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:14:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:14:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:14:29] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:14:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:14:29] OpenEvent: STATUS_ACCESS_DENIED

[07:24/16:14:29] name: MSFT.VSA.COM.DISABLE.4628

[07:24/16:14:29] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/16:14:29] OpenEvent: STATUS_ACCESS_DENIED

[07:24/16:14:29] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:24/16:14:29] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/16:15:09] Adobe Reader Protected Mode Logging Initiated

[07:24/16:15:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:15:10] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:15:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:15:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:15:10] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:15:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:32:43] Adobe Reader Protected Mode Logging Initiated

[07:24/16:32:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:32:43] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:32:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:32:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:32:43] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:32:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:34:04] Adobe Reader Protected Mode Logging Initiated

[07:24/16:34:04] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:34:04] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:34:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:34:04] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:34:04] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:34:04] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:34:51] Adobe Reader Protected Mode Logging Initiated

[07:24/16:34:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:34:51] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:34:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:34:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:34:51] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:34:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:35:05] Adobe Reader Protected Mode Logging Initiated

[07:24/16:35:05] Adobe Reader Protected Mode Logging Initiated

[07:24/16:35:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:35:05] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:35:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:35:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:35:05] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:35:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:35:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:35:05] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:35:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:35:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:35:05] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:35:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:35:05] OpenEvent: STATUS_ACCESS_DENIED

[07:24/16:35:05] name: MSFT.VSA.COM.DISABLE.7964

[07:24/16:35:05] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/16:35:05] OpenEvent: STATUS_ACCESS_DENIED

[07:24/16:35:05] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:24/16:35:05] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/16:38:06] Adobe Reader Protected Mode Logging Initiated

[07:24/16:38:06] Adobe Reader Protected Mode Logging Initiated

[07:24/16:38:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:38:06] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:38:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:38:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:38:06] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:38:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:38:47] Adobe Reader Protected Mode Logging Initiated

[07:24/16:38:47] Adobe Reader Protected Mode Logging Initiated

[07:24/16:38:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:38:48] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:38:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:38:48] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:38:48] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:38:48] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:38:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:38:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/16:38:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:38:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:38:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/16:38:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:38:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:38:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/16:38:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:38:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:38:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/16:38:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:38:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:38:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/16:38:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:38:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:38:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/16:38:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:38:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:38:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/16:38:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:38:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:38:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/16:38:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:38:57] Adobe Reader Protected Mode Logging Initiated

[07:24/16:38:57] Adobe Reader Protected Mode Logging Initiated

[07:24/16:38:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:38:57] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:38:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:38:57] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:38:57] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:38:57] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:17] Adobe Reader Protected Mode Logging Initiated

[07:24/16:39:17] Adobe Reader Protected Mode Logging Initiated

[07:24/16:39:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:17] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:39:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:17] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:39:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/16:39:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/16:39:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/16:39:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/16:39:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/16:39:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/16:39:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/16:39:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/16:39:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:26] Adobe Reader Protected Mode Logging Initiated

[07:24/16:39:26] Adobe Reader Protected Mode Logging Initiated

[07:24/16:39:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:26] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:39:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:26] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:39:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:26] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:39:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:26] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:39:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:26] OpenEvent: STATUS_ACCESS_DENIED

[07:24/16:39:26] name: MSFT.VSA.COM.DISABLE.5800

[07:24/16:39:26] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/16:39:26] OpenEvent: STATUS_ACCESS_DENIED

[07:24/16:39:26] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:24/16:39:26] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/16:39:39] Adobe Reader Protected Mode Logging Initiated

[07:24/16:39:39] Adobe Reader Protected Mode Logging Initiated

[07:24/16:39:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:39] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:39:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:39] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:39:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:39] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:39:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:39] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:39:39] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:39:39] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:39:39] OpenEvent: STATUS_ACCESS_DENIED

[07:24/16:39:39] name: MSFT.VSA.COM.DISABLE.1212

[07:24/16:39:39] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/16:39:39] OpenEvent: STATUS_ACCESS_DENIED

[07:24/16:39:39] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:24/16:39:39] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/16:43:21] Adobe Reader Protected Mode Logging Initiated

[07:24/16:43:21] Adobe Reader Protected Mode Logging Initiated

[07:24/16:43:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:43:21] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:43:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:43:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:43:21] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:43:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:43:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:43:21] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/16:43:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:43:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/16:43:21] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/16:43:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/16:43:21] OpenEvent: STATUS_ACCESS_DENIED

[07:24/16:43:21] name: MSFT.VSA.COM.DISABLE.7260

[07:24/16:43:21] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/16:43:21] OpenEvent: STATUS_ACCESS_DENIED

[07:24/16:43:21] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:24/16:43:21] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:24/17:08:47] Adobe Reader Protected Mode Logging Initiated

[07:24/17:08:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/17:08:47] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/17:08:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/17:08:47] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/17:08:47] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/17:08:47] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/17:08:53] Adobe Reader Protected Mode Logging Initiated

[07:24/17:08:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/17:08:54] real path: \REGISTRY\MACHINE\Software\Adobe

[07:24/17:08:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/17:08:54] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/17:08:54] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:24/17:08:54] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/17:08:54] Adobe Reader Protected Mode Logging Initiated

[07:24/17:09:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/17:09:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/17:09:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/17:09:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/17:09:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/17:09:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/17:09:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/17:09:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/17:09:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/17:09:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/17:09:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/17:09:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:06:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:06:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:06:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:06:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:06:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:06:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:06:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:06:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:06:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:06:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:06:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:06:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:06:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:06:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:06:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:06:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:06:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:06:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:06:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:06:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:06:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:06:58] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:06:58] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:06:58] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:07:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:07:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:07:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:07:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:07:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:07:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:07:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:07:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:07:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:07:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:07:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:07:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:07:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:07:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:07:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:07:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:07:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:07:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:07:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:07:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:07:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:07:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:07:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:07:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:07:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:07:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:07:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:07:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:07:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:07:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:07:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:07:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:07:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:07:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:07:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:07:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:07:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:07:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:07:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:07:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:07:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:07:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:07:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:07:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:07:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:24/18:07:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:24/18:07:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:24/18:07:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/08:48:55] Adobe Reader Protected Mode Logging Initiated

[07:25/08:48:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/08:48:56] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/08:48:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/08:48:56] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/08:48:56] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/08:48:56] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/08:49:12] Adobe Reader Protected Mode Logging Initiated

[07:25/08:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/08:49:12] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/08:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/08:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/08:49:12] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/08:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:14:16] Adobe Reader Protected Mode Logging Initiated

[07:25/09:14:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:14:17] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/09:14:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:14:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:14:17] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/09:14:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:24] Adobe Reader Protected Mode Logging Initiated

[07:25/09:25:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:25] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/09:25:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:25] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/09:25:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:25] NtCreateMutant: STATUS_ACCESS_DENIED

[07:25/09:25:25] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:25/09:25:25] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:25/09:25:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:25] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:25/09:25:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:25] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:25/09:25:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:25:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:25:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:25:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:26] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:25:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:27] OpenEvent: STATUS_ACCESS_DENIED

[07:25/09:25:27] name: Global\BFE_Notify_Event_{8beb996f-5be1-4983-bbdc-586c02be49a6}

[07:25/09:25:27] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/09:25:27] NtCreateMutant: STATUS_ACCESS_DENIED

[07:25/09:25:27] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:25/09:25:27] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:25/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:27] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:25/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:27] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:25/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:27] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:25/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:27] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:25/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:27] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:25/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:27] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:25/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:25:27] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:25:27] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:25:27] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:49:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:49:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:49:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:49:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:49:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:49:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:49:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:49:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:49:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:49:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:49:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:49:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:49:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:49:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:49:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/09:49:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/09:49:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/09:49:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:34] Adobe Reader Protected Mode Logging Initiated

[07:25/10:00:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:35] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/10:00:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:35] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/10:00:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:35] NtCreateMutant: STATUS_ACCESS_DENIED

[07:25/10:00:35] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:25/10:00:35] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:25/10:00:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:35] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:25/10:00:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:35] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:35] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:25/10:00:35] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:00:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:00:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:00:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:00:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:00:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:00:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:00:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:36] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:36] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:00:36] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:36] OpenEvent: STATUS_ACCESS_DENIED

[07:25/10:00:36] name: Global\BFE_Notify_Event_{82b09f3d-3258-433b-906d-65cceb3f32ff}

[07:25/10:00:36] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/10:00:37] NtCreateMutant: STATUS_ACCESS_DENIED

[07:25/10:00:37] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:25/10:00:37] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:25/10:00:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:37] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:25/10:00:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:37] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:25/10:00:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:37] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:25/10:00:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:37] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:25/10:00:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:37] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:25/10:00:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:37] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:37] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:25/10:00:37] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:38] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:38] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:00:38] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:38] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:38] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:00:38] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:38] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:38] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:00:38] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:00:38] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:00:38] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:00:38] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:04:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:04:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:04:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:04:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:04:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:04:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:04:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:04:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:04:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:04:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:04:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:04:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:04:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:04:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:04:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:04:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:04:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:04:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:04:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:04:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:04:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:04:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:04:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:04:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:04:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:04:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:04:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:04:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:04:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:04:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:04:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:04:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:04:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:04:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:04:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:04:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:04:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:04:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:04:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:04:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:04:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:04:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:04:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:04:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:04:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:04:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:04:06] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:04:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:42] Adobe Reader Protected Mode Logging Initiated

[07:25/10:08:42] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:42] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/10:08:42] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:42] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:42] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/10:08:42] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:44] Adobe Reader Protected Mode Logging Initiated

[07:25/10:08:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:44] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/10:08:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:44] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/10:08:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:44] OpenEvent: STATUS_ACCESS_DENIED

[07:25/10:08:44] name: MSFT.VSA.COM.DISABLE.7340

[07:25/10:08:44] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/10:08:44] OpenEvent: STATUS_ACCESS_DENIED

[07:25/10:08:44] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:25/10:08:44] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/10:08:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:45] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:08:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:45] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:08:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:45] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:08:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:45] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:08:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:45] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:08:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:45] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:08:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:45] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:08:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:45] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:08:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:45] Adobe Reader Protected Mode Logging Initiated

[07:25/10:08:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:45] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/10:08:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:45] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:45] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/10:08:45] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:46] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:08:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:46] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:08:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:46] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:08:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:08:46] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:08:46] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:08:46] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:10:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:10:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:10:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:10:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:10:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:10:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:10:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:10:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:10:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:10:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:10:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:10:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:10:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:10:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:10:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:10:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:10:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:10:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:10:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:10:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:10:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:10:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:10:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:10:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:10:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:10:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:10:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:10:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:10:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:10:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:10:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:10:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:10:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:10:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:10:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:10:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:10:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:10:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:10:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:10:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:10:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:10:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:10:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:10:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:10:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:10:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:10:28] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/10:10:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:13:52] Adobe Reader Protected Mode Logging Initiated

[07:25/10:13:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:13:53] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/10:13:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:13:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:13:53] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/10:13:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:30:59] Adobe Reader Protected Mode Logging Initiated

[07:25/10:30:59] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:30:59] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/10:30:59] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:30:59] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:30:59] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/10:30:59] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:31:17] Adobe Reader Protected Mode Logging Initiated

[07:25/10:31:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:31:18] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/10:31:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:31:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:31:18] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/10:31:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:31:28] Adobe Reader Protected Mode Logging Initiated

[07:25/10:31:28] Adobe Reader Protected Mode Logging Initiated

[07:25/10:31:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:31:28] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/10:31:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:31:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:31:28] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/10:31:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:31:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:31:28] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/10:31:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:31:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:31:28] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/10:31:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:31:29] OpenEvent: STATUS_ACCESS_DENIED

[07:25/10:31:29] name: MSFT.VSA.COM.DISABLE.6772

[07:25/10:31:29] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/10:31:29] OpenEvent: STATUS_ACCESS_DENIED

[07:25/10:31:29] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:25/10:31:29] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/10:32:37] Adobe Reader Protected Mode Logging Initiated

[07:25/10:32:38] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:32:38] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/10:32:38] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/10:32:38] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/10:32:38] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/10:32:38] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/12:10:31] Adobe Reader Protected Mode Logging Initiated

[07:25/12:10:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/12:10:31] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/12:10:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/12:10:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/12:10:31] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/12:10:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/12:10:33] Adobe Reader Protected Mode Logging Initiated

[07:25/12:10:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/12:10:34] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/12:10:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/12:10:34] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/12:10:34] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/12:10:34] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:43:10] Adobe Reader Protected Mode Logging Initiated

[07:25/13:43:10] Adobe Reader Protected Mode Logging Initiated

[07:25/13:43:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:43:10] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:43:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:43:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:43:10] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:43:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:43:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:43:10] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:43:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:43:10] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:43:10] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:43:10] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:43:10] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:43:10] name: MSFT.VSA.COM.DISABLE.2632

[07:25/13:43:10] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:43:10] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:43:10] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:25/13:43:10] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:43:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:43:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:43:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:43:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:43:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:43:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:43:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:43:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:43:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:43:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:43:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:43:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:43:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:43:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:43:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:43:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:43:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:43:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:43:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:43:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:43:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:43:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:43:11] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:43:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:43:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:43:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:43:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:43:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:43:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:43:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:43:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:43:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:43:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:43:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:43:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:43:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:15] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:15] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:15] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:20] Adobe Reader Protected Mode Logging Initiated

[07:25/13:48:20] Adobe Reader Protected Mode Logging Initiated

[07:25/13:48:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:20] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:48:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:20] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:48:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:20] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:48:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:20] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:48:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:20] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:48:20] name: MSFT.VSA.COM.DISABLE.588

[07:25/13:48:20] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:48:20] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:48:20] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:25/13:48:20] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:48:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:20] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:48:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:48:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:48:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:09] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:09] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:09] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:11] Adobe Reader Protected Mode Logging Initiated

[07:25/13:50:11] Adobe Reader Protected Mode Logging Initiated

[07:25/13:50:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:12] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:50:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:12] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:50:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:12] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:50:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:12] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:50:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:12] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:50:12] name: MSFT.VSA.COM.DISABLE.7052

[07:25/13:50:12] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:50:12] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:50:12] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:25/13:50:12] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:50:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:12] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:12] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:12] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:13] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:13] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:13] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:41] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:41] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:41] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:42] Adobe Reader Protected Mode Logging Initiated

[07:25/13:50:42] Adobe Reader Protected Mode Logging Initiated

[07:25/13:50:42] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:42] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:50:42] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:42] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:42] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:50:42] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:43] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:50:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:43] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:50:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:43] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:50:43] name: MSFT.VSA.COM.DISABLE.6264

[07:25/13:50:43] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:50:43] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:50:43] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:25/13:50:43] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:50:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:43] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:43] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:43] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:43] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:43] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:43] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:43] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:43] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:43] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:50:44] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:50:44] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:50:44] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:23] Adobe Reader Protected Mode Logging Initiated

[07:25/13:51:23] Adobe Reader Protected Mode Logging Initiated

[07:25/13:51:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:23] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:51:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:23] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:51:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:23] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:51:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:23] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:51:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:23] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:51:23] name: MSFT.VSA.COM.DISABLE.4332

[07:25/13:51:23] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:51:23] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:51:23] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:25/13:51:23] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:51:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:23] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:23] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:23] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:23] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:23] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:23] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:23] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:23] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:24] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:24] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:24] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:50] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:50] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:50] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:50] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:50] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:50] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:50] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:50] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:50] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:50] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:50] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:50] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:50] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:50] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:50] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:50] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:50] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:50] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:51] Adobe Reader Protected Mode Logging Initiated

[07:25/13:51:52] Adobe Reader Protected Mode Logging Initiated

[07:25/13:51:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:52] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:51:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:52] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:51:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:52] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:51:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:52] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:51:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:52] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:51:52] name: MSFT.VSA.COM.DISABLE.4224

[07:25/13:51:52] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:51:52] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:51:52] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:25/13:51:52] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:51:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:51:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:51:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:51:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:19] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:19] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:19] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:21] Adobe Reader Protected Mode Logging Initiated

[07:25/13:52:21] Adobe Reader Protected Mode Logging Initiated

[07:25/13:52:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:21] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:52:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:21] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:52:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:21] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:52:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:21] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:52:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:21] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:52:21] name: MSFT.VSA.COM.DISABLE.4976

[07:25/13:52:21] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:52:21] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:52:21] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:25/13:52:21] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:52:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:21] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:21] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:21] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:22] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:22] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:22] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:51] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:51] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:51] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:52] Adobe Reader Protected Mode Logging Initiated

[07:25/13:52:52] Adobe Reader Protected Mode Logging Initiated

[07:25/13:52:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:52] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:52:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:52] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:52:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:52] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:52:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:52] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:52:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:52] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:52:52] name: MSFT.VSA.COM.DISABLE.6996

[07:25/13:52:52] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:52:52] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:52:52] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:25/13:52:52] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:52:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:52] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:52] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:52] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:52:53] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:52:53] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:52:53] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:17] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:17] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:17] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:18] Adobe Reader Protected Mode Logging Initiated

[07:25/13:53:18] Adobe Reader Protected Mode Logging Initiated

[07:25/13:53:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:18] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:53:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:18] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:53:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:18] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/13:53:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:18] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:18] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/13:53:18] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:19] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:53:19] name: MSFT.VSA.COM.DISABLE.1628

[07:25/13:53:19] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:53:19] OpenEvent: STATUS_ACCESS_DENIED

[07:25/13:53:19] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:25/13:53:19] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:25/13:53:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/13:53:25] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/13:53:25] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/13:53:25] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/14:01:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/14:01:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/14:01:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/14:01:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/14:01:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/14:01:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/14:01:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/14:01:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/14:01:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/14:01:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/14:01:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/14:01:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/14:01:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/14:01:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/14:01:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/14:01:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/14:01:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/14:01:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/14:01:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/14:01:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/14:01:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/14:01:07] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/14:01:07] real path: \REGISTRY\USER\S-1-5-21-823518204-776561741-682003330-27966\Software\ Adobe\Adobe Acrobat

[07:25/14:01:07] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/16:12:06] Adobe Reader Protected Mode Logging Initiated

[07:25/16:12:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/16:12:06] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/16:12:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/16:12:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/16:12:06] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/16:12:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/16:12:06] NtCreateMutant: STATUS_ACCESS_DENIED

[07:25/16:12:06] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:25/16:12:06] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:25/16:12:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/16:12:06] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:25/16:12:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/16:12:06] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/16:12:06] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:25/16:12:06] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/16:16:04] Adobe Reader Protected Mode Logging Initiated

[07:25/16:16:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/16:16:05] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/16:16:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/16:16:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/16:16:05] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/16:16:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/16:16:05] NtCreateMutant: STATUS_ACCESS_DENIED

[07:25/16:16:05] real_path: \Sessions\1\BaseNamedObjects\RasPbFile

[07:25/16:16:05] Consider modifying policy using this policy rule: MUTANT_ALLOW_ANY

[07:25/16:16:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/16:16:05] real path: \REGISTRY\MACHINE\Software\Microsoft\Tracing

[07:25/16:16:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/16:16:05] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/16:16:05] real path: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing

[07:25/16:16:05] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/16:59:23] Adobe Reader Protected Mode Logging Initiated

[07:25/16:59:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/16:59:23] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/16:59:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/16:59:23] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/16:59:23] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/16:59:23] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/16:59:28] Adobe Reader Protected Mode Logging Initiated

[07:25/16:59:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/16:59:28] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/16:59:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/16:59:28] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/16:59:28] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/16:59:28] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/16:59:31] Adobe Reader Protected Mode Logging Initiated

[07:25/16:59:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/16:59:31] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/16:59:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/16:59:31] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/16:59:31] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/16:59:31] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/16:59:33] Adobe Reader Protected Mode Logging Initiated

[07:25/16:59:33] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/16:59:33] real path: \REGISTRY\MACHINE\Software\Adobe

[07:25/16:59:33] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:25/16:59:33] NtCreateKey: STATUS_ACCESS_DENIED

[07:25/16:59:33] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:25/16:59:33] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:26/08:22:09] Adobe Reader Protected Mode Logging Initiated

[07:26/08:22:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:26/08:22:11] real path: \REGISTRY\MACHINE\Software\Adobe

[07:26/08:22:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:26/08:22:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:26/08:22:11] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:26/08:22:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:26/08:58:29] Adobe Reader Protected Mode Logging Initiated

[07:26/08:58:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:26/08:58:29] real path: \REGISTRY\MACHINE\Software\Adobe

[07:26/08:58:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:26/08:58:29] NtCreateKey: STATUS_ACCESS_DENIED

[07:26/08:58:29] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:26/08:58:29] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:26/08:58:29] OpenEvent: STATUS_ACCESS_DENIED

[07:26/08:58:29] name: MSFT.VSA.COM.DISABLE.1296

[07:26/08:58:29] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:26/08:58:29] OpenEvent: STATUS_ACCESS_DENIED

[07:26/08:58:29] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:26/08:58:29] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:26/08:59:20] Adobe Reader Protected Mode Logging Initiated

[07:26/08:59:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:26/08:59:20] real path: \REGISTRY\MACHINE\Software\Adobe

[07:26/08:59:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:26/08:59:20] NtCreateKey: STATUS_ACCESS_DENIED

[07:26/08:59:20] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:26/08:59:20] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:26/08:59:20] OpenEvent: STATUS_ACCESS_DENIED

[07:26/08:59:20] name: MSFT.VSA.COM.DISABLE.7660

[07:26/08:59:20] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:26/08:59:20] OpenEvent: STATUS_ACCESS_DENIED

[07:26/08:59:20] name: MSFT.VSA.IEC.STATUS.6c736db0

[07:26/08:59:20] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

[07:26/09:15:25] Adobe Reader Protected Mode Logging Initiated

[07:26/09:15:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:26/09:15:26] real path: \REGISTRY\MACHINE\Software\Adobe

[07:26/09:15:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:26/09:15:26] NtCreateKey: STATUS_ACCESS_DENIED

[07:26/09:15:26] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe

[07:26/09:15:26] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:26/09:25:11] Adobe Reader Protected Mode Logging Initiated

[07:26/09:25:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:26/09:25:11] real path: \REGISTRY\MACHINE\Software\Adobe

[07:26/09:25:11] Consider modifying policy using this policy rule: REG_ALLOW_ANY

[07:26/09:25:11] NtCreateKey: STATUS_ACCESS_DENIED

[07:26/09:25:11] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe