This content has been marked as final. Show 3 replies
It should be possible on an individual computer bases, one at a time, while sitting at the computer...Did you try:
As an admin user, RIGHT click on the McAfee shield in the lower right corner, choose "VirusScan Console", then click on the "Access Protection" listing. When the Access Protection window opens, UNCHECK the box in the lower left corner which says : "Prevent McAfee Services From Being Stopped", then click on Apply, then OK.
If you're trying to do this remotely, then I'm not sure you can have your cake and eat it too. If you need "Prevent McAfee Services From Being Stopped" to be enabled, then you can't have it "disabled" at the same time.
In addition, the knowledge base article below might lead in the right direction for Group Policy issues:
ERROR: Windows error code 5: Access is denied., Error API: RegDeleteKey, Troubleshooting code: 101
Hope this helps.
I agree that it can be done manually using steps outlined. however, my requirement is to do it remotely via vbscript.
as I mentioned, as per mcAfee help document, local administrator account should be able to start/stop mcAfee services even if this setting is enabled. they are not able to do so...I have checked and ADministrators group do have Debug privileges.
this is what is mentioned in Help document:
"Prevent McAfee processes from being stopped
Prevent users without debug privileges from terminating McAfee processes.
Notes and Tips
Users with debug program privileges can still stop McAfee processes even though you select this option.
Administrators have debug program privileges by default for Windows XP and Windows 2003 operating systems. Remove these privileges from the user’s permissions so that they cannot stop McAfee processes. "
I'll point you to your own statements as well as the Help documents notes:
"local administrator account" refer to users on the local machine, not remote users.. But maybe someone else here has done it.. Maybe they've got a solution for you.
Hope this helps.