cancel
Showing results for 
Search instead for 
Did you mean: 
shocko
Level 9
Report Inappropriate Content
Message 1 of 5

Agent version 5 - Including in Image

Jump to solution

Guys, in previous version of the agent ( 4.x) we would follow this procedure to remove the AgentGUID form the registry and prepare our images that contained VSE and the agent:

In version 4.x the agent consisted of the following services with a display names of:

  • McAfee Framework Service

However, since agent version 5.0.2.132 this single service appears to have been replaced by the following services with display names of:

  • McAfee Agent Backwards Compatibility Service
  • McAfee Agent Common Services
  • McAfee Agent Service
  • McAfee Service Controller
  • McAfee Validation Trust Protection Service

Now, the underlying service name on McAfee Agent Backwards Compatibility Service is still McAfeeFramework so is it sufficient to simply restart that to generate a new AgentGUID on agent version 5.x?

1 Solution

Accepted Solutions
andrep1 Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 3 of 5

Re: Agent version 5 - Including in Image

Jump to solution

It is covered in the product guide, do "maconfig -enforce -noguid" to clear the guid.

The McAfee agent service is the primary service. All services are controlled by the "McAfee Service Controller" mcafee uses that instead of the windows service manager now.

Best bet is to stop the services (disable access protection for the agent), clear guid and grab you image. Service will start on reboot.

View solution in original post

4 Replies

Re: Agent version 5 - Including in Image

Jump to solution

Have you tried to restart on of these services?

AFAIK, most of them are blocked, if you not

disable the following policy:

McAfee Agent / General deselect

option Enable self protection (Windows only) .

andrep1 Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 3 of 5

Re: Agent version 5 - Including in Image

Jump to solution

It is covered in the product guide, do "maconfig -enforce -noguid" to clear the guid.

The McAfee agent service is the primary service. All services are controlled by the "McAfee Service Controller" mcafee uses that instead of the windows service manager now.

Best bet is to stop the services (disable access protection for the agent), clear guid and grab you image. Service will start on reboot.

View solution in original post

Highlighted

Re: Agent version 5 - Including in Image

Jump to solution

This "McAfee Service Controller" make things worth and more complicated for admins,

if you have issues with system, this security enhancement is of no help, cause it misses

the possibility to switch it of from ePo - console. This (switch of/on) would be the real

improvement, if any of this is really necessary in a managed environment.

If an machine - admin can't stop services any longer, i call this prohibition not security!

Re: Agent version 5 - Including in Image

Jump to solution

But you can, just set it in EPO and push it to all clients from the top of the system tree. Make sure these policies are inherited down the tree.

In EPO, goto Assigned Policies under system tree (Top level), choose McAfee Agent under product. Edit the general policy, untick 'Enable self protection (Windows only)', click Save. Wait or push to client.

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community