The install is occurring via ePO task as well.
I've not come across this before...which version of VSE, and which AP rule is being triggered?
Here is the event:
Blocked by Access Protection rule
Domain\XXXXXX C:\Program Files\McAfee\DLP\Agent\fcag.exe
Common Standard Protection:Prevent modification of McAfee Common Management
Agent files and settings Action blocked : Create
I haven't got a dlp install to test with at the moment. What happens if you put an exclusion into that AP rule for the fcag.exe process?
I note there's a default entry for FCAGT.exe - it looks like the installer name has been changed: there's a default exclusion for fcag.exe in the VSE 8.8 AP rule list.
Good call, ill report back if this works.
When I had to do an install of DLP, the instructions I received said to turn off Access Protection before making any changes.
You know, I was told this too by a team member, but I couldn't find it anywhere in the DLP Product documentation. He thought if you were doing a manual install that you need to turn it off, but if it were pushed as a task from ePO there was no action needed.