Sophos services or installations may fail with errors related to Transacted registry keys. This has been seen impacting the Sophos Health Service and the installation of Sophos Network Threat Detection, but may occur on any service or install.
Error messages will be something like:
In MSI Install logs: Transaction support within the specified resource manager is not started or was shut down due to an error. In Health Logs: ERROR StatusWriter::Write Failed to write status:Failed to open transacted registry key: 6801 In Process Monitor status column: 0xC0190005
Transaction support within the specified resource manager is not started or was shut down due to an error.
ERROR StatusWriter::Write Failed to write status:Failed to open transacted registry key: 6801
This is caused due to the Microsoft Windows registry transaction process has a corrupt/stuck entry which results in its failing any further changes to that area of the registry.
Applies to the following Sophos products and versions Central Windows Endpoint Sophos Endpoint Security and Control
fsutil resource setautoreset true c:\ attrib -r -s -h c:\windows\System32\Config\TxR\* del c:\windows\System32\Config\TxR\* attrib -r -s -h c:\windows\System32\SMI\Store\Machine\* del c:\windows\System32\SMI\Store\Machine\*.tm* del c:\windows\System32\SMI\Store\Machine\*.blf del c:\windows\System32\SMI\Store\Machine\*.regtrans-ms
This will allow the Sophos components to function correctly.
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.