Then you should upgrade with Patch 3-4 or VSE 8.8
Alexander, thank you for your response. However this doesn't help me in finding the root cause analysis on why OAS is being disabled. Thanks.
It seems to be a product issue, you should contact McAfee support if you want to receive the root cause of this problem.
In your post you state the cause for McShield being disabled:
"These machines all have the similar event log entry of "The McAfee McShield service depends on the following nonexistent service: mfevtp"
The cause for why mfevtp is missing is what is unknown. Only certain things can induce that, and you ruled out the most likely one.
The solution is to remove and reinstall the product, because something came along and axed a critical service.
wwarren, thank you for your response. We are uninstalling and reinstalling the product across the organization as we run into these, but it still doesn't explain what the root cause is. Thanks!
Download the VSE870MLRP4 full install zip from McAfee's download site, check that (and its extensions) into ePO.
Download and check in patch 4 as well.
Try again. This problem happened with the original VSE8.7 with no patches.
Your scan log shows engine 5300.2777, that's ancient and suggests you're installing the original RTM build of VSE 8.7.
Could you confirm the options :
Enable on-access scanning at system startup
Enable on-access scanning when the policy is enforced. are checked, in On Access general policies.
If u r answer is yes,
Pls. log ticket with McAfee to find root case with follwing detials:
- MER result with log level 8 from any one of the affected system.
- Full Crash Dump for McShield.exe process from the affected system..
Root cause was found. We found a bad policy that made our AV revert to 8.5 on those dates. Thank you all for your help.