[BUG] claude.exe requests All Access on WinSock2 registry key causing API Error on managed Windows enterprise devices

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

Folgendes kannst du eintragen:

---

Claude Code Desktop (MSIX, v1.15200.0.0) fails on managed Windows enterprise devices with the error API Error: FEHLER: Cache Zugriff verweigert whenever a message is sent in a local session.

Process Monitor reveals the root cause: claude.exe (v2.1.181) requests All Access on HKLM\System\CurrentControlSet\Services\WinSock2\Parameters, which is denied because standard users and AppContainer identities only have ReadKey on this key in enterprise environments.

RegOpenKey → HKLM\System\CurrentControlSet\Services\WinSock2\Parameters → Desired Access: All Access → ACCESS DENIED

Claude Code should only require read access to WinSock2 parameters, not full access. Requesting All Access on a system registry key fails in any hardened enterprise environment and renders Claude Code completely unusable for local sessions.

What Should Happen?

claude.exe should only request ReadKey access on HKLM\System\CurrentControlSet\Services\WinSock2\Parameters, not All Access. Read access is sufficient to query network parameters and is permitted for standard users and AppContainer identities in enterprise environments.`

Error Messages/Logs

API Error: FEHLER: Cache Zugriff verweigert



2026-06-24 13:20:00 [warn] [CCD CycleHealth] local_e56fc4bb-a1b6-42c7-8257-1a5316aa447a api_error (success): API Error: FEHLER: Cache Zugriff verweigert
2026-06-24 13:20:00 [info] [CCD CycleHealth] unhealthy cycle for local_e56fc4bb-a1b6-42c7-8257-1a5316aa447a (17s, hadFirstResponse=true, reason=api_error)


Process Monitor output:

Date:       24.06.2026 13:29:23
Process:    claude.exe (PID 26096)
Operation:  RegOpenKey
Path:       HKLM\System\CurrentControlSet\Services\WinSock2\Parameters
Result:     ACCESS DENIED
Desired Access: All Access

Steps to Reproduce

1. Install Claude Desktop via MSIX on a managed Windows enterprise device (standard user, GPO-enforced registry permissions)
2. Open Claude Desktop and sign in
3. Open the Code tab and create a new local session
4. Type any message and send it
5. Observe: API Error: FEHLER: Cache Zugriff verweigert appears immediately
6. Confirm with Process Monitor: claude.exe requests All Access on HKLM\System\CurrentControlSet\Services\WinSock2\Parameters → ACCESS DENIED

Claude Model

Sonnet (default)

Is this a regression?

I don't know

Last Working Version

_No response_

Claude Code Version

2.1.181

Platform

Anthropic API

Operating System

Windows

Terminal/Shell

PowerShell

Additional Information

- Claude Desktop MSIX version: 1.15200.0.0
- OS: Windows 11, fully managed enterprise environment (MPREIS Warenvertriebs GmbH)
- Registry permissions on WinSock2\Parameters: BUILTIN\Users = ReadKey, AppContainer = ReadKey, Administrators = FullControl
- Claude Code works correctly on Linux (Ubuntu) with the same account
- Git for Windows installed at C:\Program Files\Git, bash.exe functional
- CLAUDE_CODE_GIT_BASH_PATH correctly set to C:\Program Files\Git\bin\bash.exe
- No proxy, no SSL inspection, no AppLocker blocks active
- Process Monitor (Procmon64) used to identify root cause