cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
mlajoie
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 1 of 5

Cannot change state of solidcore

Jump to solution

i have a Windows 2016 server that is in enable mode but is not changing modes with commands from ePO.  I've sent the machine multiple commands to enter Observe and Disable mode.  They all return as completed but the agent never changes status.  It is a virtual server being managed remotely so we cannot put it into safe mode to disable it manually.  Please advise any steps we need to take.  Thank you.

1 Solution

Accepted Solutions
mkonno
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 5

Re: Cannot change state of solidcore

Jump to solution

Hello @mlajoie 

Thank you for posting on the community.

If the status of the agent's Local CLI access is "Allowed", those commands from ePO will not succeed. For these commands to succeed, the agent's Local CLI access must be "Restricted".

You can check the current status in the "System Tree" under "General" for Solidcore Products. If it is set to "Allowed", you need to change its status to "Restricted" via the "SC: Change Local CLI Status" task.

I hope this helps.



Was my reply helpful?

If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

View solution in original post

4 Replies
mkonno
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 5

Re: Cannot change state of solidcore

Jump to solution

Hello @mlajoie 

Thank you for posting on the community.

If the status of the agent's Local CLI access is "Allowed", those commands from ePO will not succeed. For these commands to succeed, the agent's Local CLI access must be "Restricted".

You can check the current status in the "System Tree" under "General" for Solidcore Products. If it is set to "Allowed", you need to change its status to "Restricted" via the "SC: Change Local CLI Status" task.

I hope this helps.



Was my reply helpful?

If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

View solution in original post

mlajoie
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 3 of 5

Re: Cannot change state of solidcore

Jump to solution
While we have the policy set to lockdown the CLI, this particular device had the CLI recovered by another admin. This wasn't the exact solution but it pointed me to the issue. Once I locked down the CLI, commands worked as expected.

Thanks so much.
ktankink
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: Cannot change state of solidcore

Jump to solution

Hi @mlajoie Just FYI, MACC policy does not force the CLI lockdown; this is done via a SC: Change Local CLI Access client task.  You might consider scheduling a client task to run on a scheduled basis (e.g., once a week; once a day or every few days....your preference) on your MACC clients to ensure that the CLI gets relocked, just in case someone happens to unlock the CLI and forgets to lock it back down.

mlajoie
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 5 of 5

Re: Cannot change state of solidcore

Jump to solution
Good call. Thanks for that.
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community