can you provide exclusion / exception and the block your seeing? or if this is not a HIPS event and instead is a VSE exclusion, which policy are you working in?
please check the actual entry in the AccessProtectionLog.txt on the said server and check if matches the exclusion string you have set. We believe if you say "yes" but actually screenshots of the two areas may be better for anyone later visiting this thread.
thank you for the screenshots.
I have noticed that you also have edgetransport.exe exclusion as by filename and also by absolute path. That might work just because of the single filename and not because of the absolute path (I assume there are no two entities of this file distinguished by only the path so one of them could be theoretically redundant)
Therefore I have doubts specifying an exclusion as absolute path in the case when it includes a space, without the whole path being included in "s (or ''s).
Please add beserver.exe as filename, re-try the operation. If that resolves your issue, please consider using the filename only and not the absolute path.
Of course, you may try experiencing with specifying the absolute path so it is surrounded in "", '', or use with even Progra~1 instead of Program files, and see if that makes any difference.
Thanks - that all sounds logical.
I will give that a go.