KB3072630 fails to update the HKCU registry permissions as a result of the Windows Update

Summary

Windows Update KB3072630 changes how custom actions in system context interact with HKCU to resolve a vulnerability in Microsoft Windows: https://technet.microsoft.com/en-us/library/security/ms15-074.aspx

Asymptomatic

To resolve a vulnerability in Microsoft Windows, KB3072630 | MS15-074 changed how custom actions in system context can interact with HKCU.

As a result of this change, custom actions that use HKEY_CURRENT_USER to read and write keys or set permissions from a system context will have problems. The Registry view of InstallShield can be used to change the permissions on a registry key in HKCU. This error can also appear at runtime as error 27555.

Also reference Microsoft Security Bulletin MS15-074

Steps To Reproduce

1. Install KB3072630.
2. Run a MSI that changes the permissions on a key within HKCU

Resolved

The issue has been resolved in InstallShield 2015 SP1. Upgrade to the Service Pack 1 if you are using InstallShield 2015 and haven't applied the Service Pack.

Additional Information

Attached is a hotfix for InstallShield 2015.

To fix the problem, follow these steps:

• Close Visual Studio and InstallShield.
• Based on product ?

1.Make a backup copy of:

C:\Program Files (x86)\InstallShield\2015\Redist\Language Independent\i386\IsLockPermissions.dll

And:

C:\Program Files (x86)\InstallShield\2015\Redist\Language Independent\x64\IsLockPermissions.dll

2.Make a backup copy of:

C:\Program Files (x86)\InstallShield\2015 SAB\Redist\Language Independent\i386\IsLockPermissions.dll

And:

C:\Program Files (x86)\InstallShield\2015 SAB\Redist\Language Independent\x64\IsLockPermissions.dll

• Extract the folder structure to:

C:\Program Files (x86)\InstallShield\2015\Redist\Language Independent

Or:

C:\Program Files (x86)\InstallShield\2015 SAB\Redist\Language Independent

• Confirm both IsLockPermissions.dll?s have been updated.
• Rebuild your project.