We have been noticing lately that random deployments from ePO is causing workstations to have corrupted permission sets within the registry.
This in turn is causing the McAfee agent to no longer communicate with ePO.
Here are the three different scenarios that I have seen so far;
1 - Re-deployment of the McAfee agent using ePo's "Deploy Agents" action. (deploying an agent over an existing agent)
2 - Upgrading the McAfee agent from 184.108.40.2066 to 220.127.116.113 using ePO's deployment task.
3 - Deploying ENS 10.2 onto workstations.
In most cases, ePo reports that the deployment was successful but when you verify the workstation, the deployment did not complete.
If you launch SERVICES.MSC and look at McAfee's services, you will notice that the McAfee Agent Common Service is stopped.
If you try to manually start the service, you get the message in the following figure.
At this point I try to manually uninstall the McAfee agent using the following command ...\frminst.exe /remove=agent or ...\frminst.exe /forceuninstall and I get the following messages;
If I click Ignore I get...
I click Ignore again and ...
As mentioned in a prior post, I tried to manually install VSE 8.8p5 expecting it to re-install over the agent and allow me to re-deploy as stated in this link, I get the following error.
At this point, there is nothing I can do but to rebuild the workstation!
This is very frustrating for the user and concerning for the ePO admins!
What is causing ePO to corrupt the registry's permission set as stated in the above link?
I have seen Agent error 80040154 before - usually means corrupt or unregistered dll; next time around give this a try:
Tao, tried to follow the procedures in the link provided and here is what happened...
In Solution #1, I could not find the files SecureFrameworkFactory.dll or SecureFrameworkFactory3.dll on either a working or defective workstation. (could not be applied)
In Solution #2, I re-registered all of the DLLs within the c:\ProgramFiles\McAfee\Common Framework\ and c:\windows\system32\ folders and my workstation randomly and automatically rebooted itself!?!? (Same issues)
In Solution #3, still cannot re-install the McAfee agent due to the error messages stated in my initial post.
Thanks again Tao, tried the procedures in your latest post and I receive the error message that there was an Incomplete Uninstallation due to Enterprise Software detected, as was mentioned by "ptulloch" in that post!
Ok, ran the VSECleaner.exe /rvse88 on my workstation and finished with no errors.
Rebooted workstation and same issues as above!
Note: I had VSE 8.8.0p5 previously on my workstation but now I have ENS 10.2 (not sure if the VSECleaner did anything but... we also have other workstations with VSE 8.8.0p5 with the same issue and did not resolve it)
My guess, vsecleaner doesn't work on ENS 10.2 ... sounds like a support call and MER Log: McAfee Corporate KB - How to use MER tools with supported McAfee products KB59385 ... perhaps create a standalone ENS version and add command-line: setupEP.exe ADDLOCAL="tp,fw,wc" page 56
There are a few more things we will be trying tomorrow morning then we will probably place a support call to McAfee with a MER too log that we have already taken.
Thanks for the help.