1 2 Previous Next 13 Replies Latest reply on Dec 2, 2010 6:50 AM by JoeBidgood

    Agent icon reverts to old and system sometimes doesn't update

    pschmehl

      A few hundred of my hosts are displaying the old icon.  They will not update until mcupdate has been run manually.  Once it's been run manually, they will update normally, but the icon keeps reverting to the old style.

       

      The attached screeshots show the before, during and after of running about and then status monitor.

        • 1. Re: Agent icon reverts to old and system sometimes doesn't update
          JoeBidgood

          Are udaterui and mctray.exe running on the affected systems? If not, check the agent log - are there any errors related to udaterui?

          Also - possibly a silly point but worth checking: make sure that the agent policy assigned to these machines is set to display the tray icon.

           

          HTH -

           

          Joe

          • 2. Re: Agent icon reverts to old and system sometimes doesn't update
            pschmehl

            Neither one is running.  After I run the Agent Status monitor, both are running.

             

            I'm seeing this consistently and repeatedly in the agent log:

             

            2010-11-24 16:04:01    I    #2164    Agent    CePOAgent::EnforcePolicy priority=-2
            2010-11-24 16:04:01    I    #2164    Agent    Enforcing policies
            2010-11-24 16:04:01    I    #2164    LstnSvr    Enforcing Policies
            2010-11-24 16:04:01    I    #2164    Logging    Enforcing policies
            2010-11-24 16:04:01    I    #2164    Manage    Enforcing policies
            2010-11-24 16:04:01    I    #2164    UsrSpCt    Enforcing policies
            2010-11-24 16:04:01    I    #2164    UsrSpCt    Token not found. Will try to get it from shell
            2010-11-24 16:04:01    I    #2164    UsrSpCt    IsProcessRunning(Explorer.exe) returned FALSE
            2010-11-24 16:04:01    I    #2164    UsrSpCt    Try to Launch UdaterUI Again

             

            The agent error log has these repeatedly:

             

            2010-11-12 02:16:39    E    #14352    Sched    <<--CSchedule::DeleteTask hr=0x8000001b : Task is not found
            2010-11-12 02:46:56    E    #4388    Sched    <<--CSchedule::DeleteTask hr=0x8000001b : Task is not found
            2010-11-15 07:13:39    E    #2156    Logging    drop 0 [\\.\mailslot\{76889C92-A0C0-46e3-A4E1-1D6A5439B8DD}00001788] file not found
            2010-11-15 17:01:08    E    #7700    Logging    drop 0 [\\.\mailslot\VSECMA-{74B306C6-7205-430F-B3B4-4E089A0EFBF8}] file not found
            2010-11-19 02:31:24    E    #7388    Sched    <<--CSchedule::DeleteTask hr=0x8000001b : Task is not found
            2010-11-19 03:01:33    E    #6100    Sched    <<--CSchedule::DeleteTask hr=0x8000001b : Task is not found
            2010-11-22 06:46:01    E    #2156    Logging    drop 0 [\\.\mailslot\{76889C92-A0C0-46e3-A4E1-1D6A5439B8DD}0000297c] file not found
            2010-11-24 14:53:28    E    #12124    Logging    drop 0 [\\.\mailslot\VSECMA-{FA36A4C3-E4E4-48D5-8B20-8DD5EF0C7179}] file not found
            2010-11-24 15:03:59    E    #10640    Logging    drop 1 [\\.\mailslot\VSECMA-{5119A2B0-D302-47D1-B20E-867F39C0C54D}] file not found
            2010-11-24 16:01:46    E    #2156    Logging    drop 0 [\\.\mailslot\{76889C92-A0C0-46e3-A4E1-1D6A5439B8DD}000016ec] file not found
            2010-11-29 07:46:48    E    #6204    Sched    <<--CSchedule::DeleteTask hr=0x8000001b : Task is not found
            2010-11-29 08:16:54    E    #7776    Sched    <<--CSchedule::DeleteTask hr=0x8000001b : Task is not found
            2010-11-29 09:01:31    E    #2224    Logging    drop 0 [\\.\mailslot\{76889C92-A0C0-46e3-A4E1-1D6A5439B8DD}00001958] file not found

             

            This host is staying up to date, but the icon keeps switching back to the old VShield icon.  Other hosts, that have not yet had updating run manually, are not updating.  Once the host has been manually updated, it appears to stay up to date but demonstrates the strange icon behavior.

             

            I need to emphasize that I've only looked at the logs on this one machine.  Others may have other issues.

            • 3. Re: Agent icon reverts to old and system sometimes doesn't update

              It sounds like mctray.exe is getting killed or otherwise dying. You noted that on at least one machine it was not running. Mctray is responsible for the new icon - if it is not there you'll revert to displaying the icons of the individual point products (in this case VSE).

              • 4. Re: Agent icon reverts to old and system sometimes doesn't update
                pschmehl

                I have since checked two more machines.  They are both exhibiting the exact same behavior.  The machine is up to date.  Neither udaterui or mctray is running.  As soon as a launch Agent Monitor, both immediately start up.  Same errors in the logs.

                • 5. Re: Agent icon reverts to old and system sometimes doesn't update
                  pschmehl

                  I checked the Windows Event Logs.  There's nothing remarkable (that I noticed) with regard to McAfee.  The only errors in the logs are, I think, unrelated.  Since they might be, I post it here.  These are showing up periodically in the Application Log:

                   

                  The COM+ Event System failed to fire the Logon method on subscription {8AC70A89-DF13-4F37-AB84-9757C4A864C4}-{00000000-0000-0000-0000-000000000000}-{ 00000000-0000-0000-0000-000000000000}.  The subscriber returned HRESULT 80004001.

                   

                  For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

                  • 6. Re: Agent icon reverts to old and system sometimes doesn't update
                    JoeBidgood

                    Can you open a support case, requesting MA hotfix 540822? It's not a perfect match to your symptoms but the COM+ error is close enough for me to think they  may be related...  try the HF on a couple of affected machines and see what happens.

                     

                    Thanks -

                     

                    Joe

                    • 8. Re: Agent icon reverts to old and system sometimes doesn't update
                      pschmehl

                      Joe, we're already at MA 4.5.0 Hotfix 620018.  Wouldn't that include MA hotfix 540822?

                      • 9. Re: Agent icon reverts to old and system sometimes doesn't update
                        pschmehl

                        Answering my own question....

                        1. Issue: This Hotfix does not include Hotfix 540822,  which addresses an issue where the agent service hung and did not  collect properties, communicate with the server, run tasks, or enforce  policies. This issue occurred primarily on servers with a high volume of  log-on and log-off activity (thousands). (Reference 540822) 

                          Resolution: The resolution for this issue (620018), and Hotfix 540822 will be combined in the McAfee Agent 4.5 Patch 2 for Windows release.

                        2. Issue: This Hotfix does not include Hotfix 584510,  which addresses an issue where the McAfee ePolicy Orchestrator server  and Agent Handler entries contained in the sitelist.xml file were not  installed properly during an agent upgrade. This resulted in missing  ePolicy Orchestrator  server or Agent Handler entries. (Reference  584510) 

                          Resolution: The resolution for this issue (620018), and Hotfix 584510 will be combined in the McAfee Agent 4.5 Patch 2 for Windows release.

                         

                        Arghh!  Any idea when Patch 2 will be released?

                        1 2 Previous Next