how did you manage to change the McAfee McShield Service settings? It's locked on my Clients even in protected mode. I have a somewhat similar Problem with Patch 9 described here.
I don't use ePo, so the only way to have the OnAccessScanner enabled is to check the Checkbox for On-Access Scanning at system startup in the VirusScan Console again which gets disabled through Patch 9. Meanwhile I think it's a bug in the Patch.
Already figured it out. Just had to deactivate the Access Protection. That simple...
But it doesn't change the OnAcessScanner behavior with Patch 9 on my Clients.
Change the Value Data to 0 of this key
and start service McShield
Check out this KB:
Make sure that the Cryptographic and Power services are set to Automatic, and be sure that the McAfee Validation Trust Protection Service and any others are not disabled.