7 Replies Latest reply on Oct 12, 2009 12:48 AM by serc09

    No polices for VSE 8.7

    serc09
      Hey there.

      I have a little problem with ePO 4.5.

      First of all ePO 4.5 is running on a VMWare with Server 2003 installed.

      It seems to work fine an all clients - but yersterday i tried the first time to control another server 2003 with ePO. Installing the agent works and in the system-tree the server is shown as managed.
      Then i installed VSE 8.7 through the ePO and it is installed, fine so far.

      But my problem is that on the server 2003 no policies which i adjusted on the ePO is taken over to the server - see the link to the picture on imageshack.

      On the left you see the settings i made on the ePO and on the right you see the settings on the "client"-server.

      [Picture on ImageShack]

      And this is not just after installing VSE 8.7 - installing is at least 8hours ago and i already reactivated the agent several times.

      I hope you can help me with that problem.

      And if there is also a solution how to show up the mcafee icon "M" on the server instead of just the VSE-Shield-Icon i would be very grateful too.

      Greets from Germany

      serc09

      PS: Please excuse my poor englisch sad
        • 1. RE: No polices for VSE 8.7
          jmcleish
          Have you assigned your "Server Default" policy to your tree structure/servers?

          Look under assignments to check.

          It looks as though its picking up the default policy.


          The M icon is in the McAfee Agent policies- general options:
          General options:

          Show the McAfee system tray icon (Windows only)
          • 2. RE: No polices for VSE 8.7
            serc09
            THX jmcleish for your fast answer.

            I solved the problems with the settings, it was because i didn`t force the server default policy to the server.... (see img).

            [img]




            I already had these settings set but rechecked it - for the agent, i only have one policy, for clients and now servers - works fine on the clients but not on the server.

            Anything else i can check or do?
            • 3. RE: No polices for VSE 8.7
              jmcleish
              maybe this is the problem

               


              ERROR: Failed to send command to ePO Agent (McAfee Agent Tray icon does not display when policy is set for it to be)
              Corporate KnowledgeBase ID: KB66073
              Published: June 16, 2009

              Environment
              All supported operating systems. For details, see KB51109
              Problem 1
              If you run cmdagent /s from a command line on a client, you see the following error:

              Failed to send command to ePO Agent
              Problem 2
              The McAfee Agent system tray icon does is not dispalyed on the client , although the agent policy is set correctly in ePolicy Orchestrator (ePO).

              Policies for all installed McAfee products are correctly enforced on the affected client computer. This can be verified by reviewing the agent_<computername>.log on the client computer. If an Agent Wakeup Call is sent and policy enforcement takes place, no errors are reported in the agent_<computername>.log.
              System Change
              A DWORD NoUpdaterUI entry was set / added in the registry under the following key:

              [HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator]
              Cause
              The DWORD NoUpdaterUI value is set to 1 in the registry of the affected computer in the following key:

              [HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator]
              Solution
              Remove the added DWORD value entry and restart the Framework Service:

              CAUTION: This article contains information about opening or modifying the registry.

              * The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly.
              * Before proceeding, McAfee strongly recommends backing up your registry and understanding the restore process. For more information, see: http://support.microsoft.com/kb/256986
              * Do not run a .REG file that is not confirmed to be a genuine registry import file.


              1. Click Start, Run, type regedit and click OK.
              2. Naviagate to: [HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator]
              3. Remove the NoUpdaterUI DWORD entry.
              4. Click Start, Run, type services.msc and click OK.
              5. Right-click on the following service and click Restart:

              McAfee Framework Service

              • 4. RE: No polices for VSE 8.7
                serc09
                Hmmm, there is no DWORD entry called "NoUpdaterUI" in "[HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator]" :(

                Anythins else?
                • 5. RE: No polices for VSE 8.7
                  JoeBidgood
                  Remember that the agent tray icon is not displayed on 64-bit systems, nor on terminal servers - that may be why you can't see it.

                  HTH -

                  Joe
                  • 6. RE: No polices for VSE 8.7
                    serc09
                    It is not a 64-bit OS nor is it a terminal server.
                    • 7. RE: No polices for VSE 8.7
                      serc09
                      Good morning.

                      The "M" did`t show up till Friday ~15:00 when i went off into weekend - but now its showing up. ;)

                      But i have another question for you:

                      Over the weekend an "unwanted" program was found and VSE blocked the access like it should. So far so good, but the programm is not "unwanted" and i don`t know how to "unblock" the file again cause i don`t find anything in the list of given exclusions.

                      I add a picture and hope you guys can help me one more time.

                      [I`m a picture]

                      THX

                      serc09