Switch from observer mode to enable mode with ePO

[micha]

Hi there,

we have Solidcore with the ePO
put in the observemode. We have for that
set a client task. The result
was also in the "Solidcore Client Task Log"
displayed. Now we would like to go back to the
enable mode. For that we have created a
Client Task "SC: Run Command" with the command
"enable". This doesn't work.
The result is not displayed in the Solidcore Client Task Log.

What do we have to do to get Solidcore back into its status
get enable.

[DG1]

Hi @micha ,

Please follow the steps in the below article to switch to enable mode.

https://docs.mcafee.com/bundle/application-control-8.1.0-windows-product-guide-epolicy-orchestrator/... 

[micha]

I did it as in the instructions.
The Solidcore Client Task Log also states that the
Task status completed and command status sucess.
Unfortunately, the Observemode is still on the client
set:
McAfee Solidifier: Observe
McAfee Solidifier on reboot: Observe

[tucker84]

Were you able to resolve this?

[AdithyanT]

Hi @tucker84,

Thank you for your response.

If you also have the same issue, May I suggest pushing down "Sadmin eo" command to check if ends observe mode. This should automatically transform the mode from Observe to enable.

[tucker84]

Thanks, I don't have the same issue. I was hoping the user was able to resolve their issue.

[mlajoie]

instead of using 'run commands' use either:

SC: Enable or SC: Observe Mode

For either of those options, if you don't already have tasks created that end observe, you can click on the category and then 'create new task' and enable application control.

Try one and if it doesn't work, try the other.  In my experience, for what it is worth, one of them always works but there doesn't seem to be  rhyme or reason.

If neither of them work, check to see if the CLI is locked down.  If it is not, you will need to lock it down and then try the commands again.  If it is already locked down, you may want to access the machine and recover the CLI and enable it from there.

Hope that helps.