2 Replies Latest reply on Aug 28, 2012 6:45 AM by Tristan

    Disable VirusScan using Epo


      For locating some issues maybe related to McAfee, i need to temporary disable the virusscanner of some workstations and servers in our domain.


      I want to create a node in the System Tree, and move some of the machines to this location, an then it should be possible to disable Virusscan.

      But how can i create a policy that will disable the virusscanner? I can open the VirusScan-console, Unlock the user interface, and stop the tasks, but after a while (due to Epo), the tasks are started again.

        • 1. Re: Disable VirusScan using Epo

          Hmm, some extra searching thru epo, and i can answer my question myself.


          Duplicate 3 default policies:

          - Access Protection Plicies

          - On Delivery Email Scan Policies

          - On -Access General Policies


          Edit the dublicate (i called them 'disable'), and uncheck almost all checkboxes i could find.


          Go to the system tree, and edit the assignments, and broke the inheritance and assign the 'disable' policy.


          Then on the machines, checked for new policies and enforced them. (Or just wait until Epo updates the policies automatically).

          • 2. Re: Disable VirusScan using Epo

            I don't think you can disabled via ePO


            You could possibly do it by disabling access protection via a policy and then using a cmd script to disable McAfee services with 'SC'


                    SC is a command line program used for communicating with the Service Control Manager and services.
                    sc <server> [command] [service name] <option1> <option2>...

                    The option <server> has the form "\\ServerName"
                    Further help on commands can be obtained by typing: "sc [command]"


            So the following will disable the framework service and VSE service


            sc \\computer stop McAfeeFramework

            sc \\computer stop McShield


            or possibly the McAfee Profiler might be a better tool to analyse VSE performance


            https://kc.mcafee.com/corporate/index?page=content&id=KB69683&cat=CORP_AAC_MCAFE E_UTILITIES&actp=LIST


            http://mer.mcafee.com/enduser/downloadmcprofiler.aspx to download it