I was asked this question and didn't know how to answer it. The VirusScanAgent must have some permission set so that it can quarantine or delete files.Does anyone know what these permissions are or how they get set? Does anyoneknow where to check this?
In fact, that is the basis for a McAfee program: 'ePO Endpoint Deployment Kit 9.4' which can be used to install other software on systems where the 'user' would not have enough rights to install.
See this discussion: https://community.mcafee.com/docs/DOC-3401
Hope this helps,
Thanks rmetzger. Your suggested thread doesn't really address what I need though. I am not looking to install additional software. The question asked of me (that I am asking here) is what are the McAfee Agent/ VirusScan Agents permissions. As phrased to me "The agent must have some permissions so that it can quarantine or delete a virus file right? So what are those permissions and where are they defined"
I realize these are two separate agents, and I guess I wasn't clear.
The McAfee agent can be used to install the VirusScan agent via McAfee ePO. When executing this task in ePO you need to insert the credentials to be used to install the VirusScan agent (domain, username, password).
Does VirusScan inherit this users credentials? Is it always given local admin privileges so it can quarantine or delete files?
Thank you for moving this to the VirusScan thread.
As a follow up question, is it possible to change this? If I wanted to couldI assign a user and it's associated rules instead of using the SYSTEM roles andprivileges?
I only ask because we have a requirement to have all users and processes beacting on behalf of a system user where possible.
Thanks again for your help