When starting the "KS Advanced Host Monitor" service, there is a temp file written to C:\Windows\Temp\ that gets created upon service start. This temp file also registers inside the registry as a file that flags the system as needing a reboot via the "PendingFileRenameOperations" within the registry.
Clearly, I will defer to your knowledge about building software and how/when/why this flag is getting set. That said, our update software (Ivanti Endpoint Manager), reads the registry key as indicating the server requires reboot. When this happens, our patches do not get pushed and we go into a continuous reboot cycle.
This particular key will have the value associated of the file that was created on service start.
Code: Select all
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SessionManager\PendingFileRenameOperations
Example Registry:
https://imgur.com/a/TkwDZ0K
In order to see the file in question, one must unclick the "Hide protected operating system files (Recommended)" checkbox.
My question is, is there a reason the "PendingFileRenameOperations" needs to be set? What exactly is it trying to rename?