cancel
Showing results for 
Search instead for 
Did you mean: 
denniz
Level 9
Report Inappropriate Content
Message 1 of 3

Disable VirusScan using Epo

Jump to solution

For locating some issues maybe related to McAfee, i need to temporary disable the virusscanner of some workstations and servers in our domain.

I want to create a node in the System Tree, and move some of the machines to this location, an then it should be possible to disable Virusscan.

But how can i create a policy that will disable the virusscanner? I can open the VirusScan-console, Unlock the user interface, and stop the tasks, but after a while (due to Epo), the tasks are started again.

1 Solution

Accepted Solutions
denniz
Level 9
Report Inappropriate Content
Message 2 of 3

Re: Disable VirusScan using Epo

Jump to solution

Hmm, some extra searching thru epo, and i can answer my question myself.

Duplicate 3 default policies:

- Access Protection Plicies

- On Delivery Email Scan Policies

- On -Access General Policies

Edit the dublicate (i called them 'disable'), and uncheck almost all checkboxes i could find.

Go to the system tree, and edit the assignments, and broke the inheritance and assign the 'disable' policy.

Then on the machines, checked for new policies and enforced them. (Or just wait until Epo updates the policies automatically).

2 Replies
denniz
Level 9
Report Inappropriate Content
Message 2 of 3

Re: Disable VirusScan using Epo

Jump to solution

Hmm, some extra searching thru epo, and i can answer my question myself.

Duplicate 3 default policies:

- Access Protection Plicies

- On Delivery Email Scan Policies

- On -Access General Policies

Edit the dublicate (i called them 'disable'), and uncheck almost all checkboxes i could find.

Go to the system tree, and edit the assignments, and broke the inheritance and assign the 'disable' policy.

Then on the machines, checked for new policies and enforced them. (Or just wait until Epo updates the policies automatically).

Tristan
Level 15
Report Inappropriate Content
Message 3 of 3

Re: Disable VirusScan using Epo

Jump to solution

I don't think you can disabled via ePO

You could possibly do it by disabling access protection via a policy and then using a cmd script to disable McAfee services with 'SC'

DESCRIPTION:
        SC is a command line program used for communicating with the Service Control Manager and services.
USAGE:
        sc <server> [command] [service name] <option1> <option2>...


        The option <server> has the form "\\ServerName"
        Further help on commands can be obtained by typing: "sc [command]"

So the following will disable the framework service and VSE service

sc \\computer stop McAfeeFramework

sc \\computer stop McShield

or possibly the McAfee Profiler might be a better tool to analyse VSE performance

https://kc.mcafee.com/corporate/index?page=content&id=KB69683&cat=CORP_AAC_MCAFEE_UTILITIES&actp=LIS...

http://mer.mcafee.com/enduser/downloadmcprofiler.aspx to download it