cancel
Showing results for 
Search instead for 
Did you mean: 
ercle
Level 7

Loss of permission sets in the registry

We have been noticing lately that random deployments from ePO is causing workstations to have corrupted permission sets within the registry.

This in turn is causing the McAfee agent to no longer communicate with ePO.

Here are the three different scenarios that I have seen so far;

1 - Re-deployment of the McAfee agent using ePo's "Deploy Agents" action. (deploying an agent over an existing agent)

2 - Upgrading the McAfee agent from 5.0.3.316 to 5.0.4.283 using ePO's deployment task.

3 - Deploying ENS 10.2 onto workstations.

In most cases, ePo reports that the deployment was successful but when you verify the workstation, the deployment did not complete.

If you launch SERVICES.MSC and look at McAfee's services, you will notice that the McAfee Agent Common Service is stopped.

If you try to manually start the service, you get the message in the following figure.

t1.jpg

t2.jpg

At this point I try to manually uninstall the McAfee agent using the following command  ...\frminst.exe /remove=agent   or  ...\frminst.exe /forceuninstall  and I get the following messages;

t3.jpg

If I click Ignore I get...

t4.jpg

I click Ignore again and ...

t5.jpg

As mentioned in a prior post, I tried to manually install VSE 8.8p5 expecting it to re-install over the agent and allow me to re-deploy as stated in this link, I get the following error.

t6.jpg

At this point, there is nothing I can do but to rebuild the workstation!

This is very frustrating for the user and concerning for the ePO admins!

What is causing ePO to corrupt the registry's permission set as stated in the above link?

0 Kudos
8 Replies
tao
Level 13

Re: Loss of permission sets in the registry

I have seen Agent error 80040154 before - usually means corrupt or unregistered dll; next time around give this a try:

McAfee Corporate KB - McAfee Common Framework returned error 80040154 @ 1. (when you initiate an Aut...

0 Kudos
ercle
Level 7

Re: Loss of permission sets in the registry

Tao, tried to follow the procedures in the link provided and here is what happened...

In Solution #1, I could not find the files SecureFrameworkFactory.dll or SecureFrameworkFactory3.dll on either a working or defective workstation. (could not be applied)

In Solution #2, I re-registered all of the DLLs within the c:\ProgramFiles\McAfee\Common Framework\  and c:\windows\system32\ folders and my workstation randomly and automatically rebooted itself!?!? (Same issues)

In Solution #3, still cannot re-install the McAfee agent due to the error messages stated in my initial post.

0 Kudos
tao
Level 13

Re: Loss of permission sets in the registry

Take a look at it has worked for me in the past

0 Kudos
ercle
Level 7

Re: Loss of permission sets in the registry

Thanks again Tao, tried the procedures in your latest post and I receive the error message that there was an Incomplete Uninstallation due to Enterprise Software detected, as was mentioned by "ptulloch" in that post!

0 Kudos
tao
Level 13

Re: Loss of permission sets in the registry

Yea, I can't recall how I got around that last time - give vscleaner.exe a try

0 Kudos
ercle
Level 7

Re: Loss of permission sets in the registry

Ok, ran the VSECleaner.exe /rvse88 on my workstation and finished with no errors.

Rebooted workstation and same issues as above!

Note:  I had VSE 8.8.0p5 previously on my workstation but now I have ENS 10.2 (not sure if the VSECleaner did anything but...  we also have other workstations with VSE 8.8.0p5 with the same issue and did not resolve it)

0 Kudos
tao
Level 13

Re: Loss of permission sets in the registry

My guess, vsecleaner doesn't work on ENS 10.2 ... sounds like a support call and MER Log: McAfee Corporate KB - How to use MER tools with supported McAfee products KB59385  ... perhaps create a standalone ENS version and add command-line: setupEP.exe ADDLOCAL="tp,fw,wc" page 56

https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/26000/PD26256/en_US/...

0 Kudos
ercle
Level 7

Re: Loss of permission sets in the registry

There are a few more things we will be trying tomorrow morning then we will probably place a support call to McAfee with a MER too log that we have already taken.

Thanks for the help.