Hi @Maros,
Thank you for your response. Ideally, Block should not have happened. I am surprised that you have 2 machines with the same issue. Hence I would recommend creating a Service Request with us.
Can you confirm if a re-installation has any effect at all?
Apart from the below reason or a pending reboot, There should not be any other reason for Observe mode to block the script!
Why am i seeing blocking in observe mode?
If reputation is enabled in the Application Control Options policy, MAC still prevents execution of potentially malicious files while in Update/Observe mode. It is advised to trust applications which are needed in the environment yet given a low reputation score in the TIE reputations page. If the reputation is from GTI, open a service request with Technical Support to analyze and suppress the detection.
Source: https://kc.mcafee.com/corporate/index?page=content&id=KB78223
Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!
Thanks and regards,
Adithyan T