Add exception to System Remote.

[fos]

Dear Experts,

We have recently procured a Business Printer which is on the network.

The scanning has to be done using the SMB feature in Windows 10.

The scanning is being blocked by System:Remote in Access protection and we are not able to get the scanned documents. The error is as follows.

"Blocked by Access Protection rule NT AUTHORITY\SYSTEM SYSTEM:REMOTE C:\Users\user\Desktop\KM Scan\*****.pdf Anti-virus Outbreak Control:Make all shares read-only Action blocked : Create
Blocked by Access Protection rule NT AUTHORITY\SYSTEM SYSTEM:REMOTE C:\Users\user\Desktop\KM Scan\*****.pdf Anti-virus Outbreak Control:Make all shares read-only Action blocked : Create"

Can anyone please help me as to how to add exception or exclude the process?

Regards.

[Saif_f]

Hi @fos 

Thank you for posting in community forum. Looking at the event I see the source process here is ‘System:Remote’, and by design exclusions can be created for Access Protection only using source process.

As mentioned in KB68560 , creating exclusion for source process SYSTEM:REMOTE is as good as disabling rule.

https://kc.mcafee.com/corporate/index?page=content&id=KB68560

Hope this should address your concern.

Kind Regards,

Was my reply helpful?

If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and give a Kudo, together we can help other members.