We are running Windows 2003 SP2. We have TripWire install on the server. I am getting the following message from Tripwire: Element HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mssmbios\Data|BiosData is Modified I am trying to find out what the ramifications would be if these keys were (deleted/re-permissioned) I am not going to change anything but perhaps a software on the server is trying to do that.

Hi Rauloso, In order to narrow down the problem, please answer the questions below. 1. Is the message saying that the registry key is modified an error message that block the installation of Tripwire? 2. Can you successfully install the TripWire on server? At system startup, the Microsoft SMBIOS driver collects the information about the system hardware and stores it in memory allocated by the driver and in the registry at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Mssmbios\Data. I’m not sure why the installation of Tripwire will need to modify the registry related to system hardware. You may contact Tripwire for further support on this. However, the modification of Registry could cause serious problem. Please always backup the registry before you modify it. How to back up and restore the registry in Windows http://support.microsoft.com/kb/322756/ Regards, Karen Ji Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. This posting is provided "AS IS" with no warranties, and confers no rights.