Well the details above could suggest that no plicy is actually assigned for the machine or group its in.
e.g if you have ExchangeServers Group with policy assignemnt and the server gets added to for example Lost & Found - then it may not get policy changes.
If you are stating that it is slow - then the policy enforcement interval is defined in the Agent Policy in ePO.
You can adjust that to check.
You can also send wake upcalls to machines.
You can also open local status monitor on the machine
- right-click agent icon in systray select "McAfee Agent Status monitor"
- run <agent install folder>\ cmdagent /s
From this screen there is a button to check for new policies.
I definitely have a polcy assigned to my machines. When I first installed MSME8 it took them about half an hour to get it despite the fact that my machines call home every 5 minutes for policy updates (I have a smallish network so this is not a big deal). Also I got on the machines and used the GUI to request and apply policy updates over and over and sent props and events back manually also. Since that first polciy that they finally recieved, they haven't gotten any of the changes I have made in the ePO console. I have goine into the MSME console and done the update on the dahsboard. Generally the task completes successfully according to the GUI but no changes show in policy manager even if I exit and restart the GUI or even stop and restart the service.
Any help would be VERY welcome.
Well a very quick test to see if its receiving any policy at all - check settings and diagnostics - dat settings - there will be a dat retention number.
Change it to something else - like if its 10 change it to 5.
Close the interface.
Open status monitor as above - click check new policies and/or enforce polices.
Once done open interface - if the number has changed back to original number then it looks like its getting some sort of policy.
If not no policy is applied.
After this the agent logging may hold some info - C:\ProgramData\McAfee\Common Framework\DB\*.log
If you are happy to post here I can look - but it will contain some internal on epo and ips repos used.
Otherwise get a case open with support .
Thanks for the hint. I did as you suggested, the only error in the log afterwards seemed to be DAT related and already addressed in a document. Sadly, the policy changing to retain 7 dats instead of 10 did not propogate. so much for lucky 7 .
Unless anyone has any ideas I guess it's time to go to support.
what product are you reinstalling, msme or the mcafee agent? this whole issue is related to a problem with the agent and how it is communicating/ gathering policies from epo so i hope you haven't been reinstalling msme. what version of the mcafee agent is installed and what version of epo is being used?
also was a support call ever logged for this issue?