1 Reply Latest reply on Feb 10, 2013 11:58 AM by deepak_yadav

    Write denied (C:\windows\softwaredistribution\download\*)

      Hi!

       

      I hope somebody can help me with this. We have SCCM deploying patches on whitelisted computers every month (I have made ccmexec.exe an updater). For the most part this works fine, but some patches generate this in ePO-console. Seems that the system is trying to create a folder in C:\windows\softwaredistribution\download\ but is denied by AppControl. How can I allow Write in this folder?

       

      Agent GUIDA2C4BE7C-95A4-4294-8EC0-F3597F7D7C81
      Event Display NameFile Write Denied
      Event File NameC:\windows\softwaredistribution\download\94a84b80b8b45a1ac53a0e5d085513da0f09965 5
      Event Generated TimeFeb 1, 2013 3:35:29 AM Central European Time
      Event Id20719
      Event NameWRITE_DENIED
      Event Seq No4,370
      Generated by an UpdaterNo
      Generated in an Update WindowNo
      Object NameC:\windows\softwaredistribution\download\94a84b80b8b45a1ac53a0e5d085513da0f09965 5
      Performed ByNT INSTANS\SYSTEM
      Process ID2904
      Program NameC:\WINDOWS\system32\SVCHOST.EXE
      ReasonMcAfee Application Control prevented an attempt to modify this file because this file is whitelisted. To make changes to whitelisted files, define a policy with the relevant rules.
      Reconciliation StatusNot yet Reconciled
      Reconciliation Ticket
      Severity3
      System NameX23403
      User NameNT INSTANS\SYSTEM

       

      Thanks! /Peter