cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
bujar
Level 7
Report Inappropriate Content
Message 1 of 4

Remote Registry and WMI

Jump to solution

Dear Mcafee Comunnity,

Dose anyone know why Remote Registrty is neceseary for ePo agent and if WMI is used by it?

We find Remote Registry a potential threat to our organization, and we need to make sure it is not used in any way before disabling the service including WMI (windows management instumentation).

Thank you

 

1 Solution

Accepted Solutions
McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: Remote Registry and WMI

Jump to solution

Whether remote registry uses WMI or not is a question for Microsoft.  How we use remote registry is through agent deployment functions (deploy agent).  KB56386 describes the environmental requirements to deploy agents.  If you use that functionality, disabling remote registry will cause the agent deployments to fail.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

3 Replies
McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: Remote Registry and WMI

Jump to solution

Whether remote registry uses WMI or not is a question for Microsoft.  How we use remote registry is through agent deployment functions (deploy agent).  KB56386 describes the environmental requirements to deploy agents.  If you use that functionality, disabling remote registry will cause the agent deployments to fail.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

bujar
Level 7
Report Inappropriate Content
Message 3 of 4

Re: Remote Registry and WMI

Jump to solution

Hi Cdinet,

Thank you for providing link to the article. Considering that we find keeping Remote Registry service running, is it possible to keep the service with a startup type set to Manual, instead of keeping the service running all the time?

Thank you

 

McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 4 of 4

Re: Remote Registry and WMI

Jump to solution

You would have to test that to see if that would work.  I can't say for sure whether the deploy agent process would start that service up.  I would think it would need to be already running.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?