4 Replies Latest reply on Jun 12, 2014 3:37 AM by lshit

    Problems Pushing Agent

    lshit

      Our old Epolicy Server died and we have just setup a new one and installed Epolicy 5.1.0.

       

      Our client machines are running VirusScan 8.7.0i.

       

      When trying to push the agent to the clients we are getting the following issues reported in the AccessProtectionLog.txt on the client:

      22/05/2014          10:53:56          Blocked by Access Protection rule           NT AUTHORITY\SYSTEM          C:\Program Files (x86)\McAfee\Common Framework\msaconfig.exe          C:\ProgramData\McAfee\Common Framework\FrameworkManifest.xml          Common Standard Protection:Prevent modification of McAfee Common Management Agent files and settings          Action blocked : Write

      22/05/2014          10:53:56          Blocked by Access Protection rule           NT AUTHORITY\SYSTEM          C:\Program Files (x86)\McAfee\Common Framework\msaconfig.exe          C:\ProgramData\McAfee\Common Framework\SiteList.xml          Common Standard Protection:Prevent modification of McAfee Common Management Agent files and settings          Action blocked : Write

      22/05/2014          10:53:57          Blocked by Access Protection rule           NT AUTHORITY\SYSTEM          C:\Program Files (x86)\McAfee\Common Framework\msaconfig.exe          C:\ProgramData\McAfee\Common Framework\keystore\serverpubkey.bin          Common Standard Protection:Prevent modification of McAfee Common Management Agent files and settings          Action blocked : Create

       

      Any suggestions would be greatly appreciated as the AV on the PCs is currently outdated.

        • 1. Re: Problems Pushing Agent
          Laszlo G

          This may be caused by the fact that VSE 8.7 is not supported under ePO 5.1 and that you cannot manage its policies.

           

          You first need to upgrade VSE to 8.8, after this you probably won't see these issues again

          • 2. Re: Problems Pushing Agent
            Richard Carpenter

            HI,

             

            try try importing your old server security key into your new epo server and creating a DNS aliases for your old server name pointing to the IP address of you new server.

             

            when your endpoints try to check in using DNS name they will resolve to your new server, provide the security key you have imported, and get the server comm setting updates to point to the new server.

             

            also check in the vse8.7 extensions and you can manage them from your new server, or create a VSE 8.8 deployment task.

             

            Best of luck,

            Rich

            • 3. Re: Problems Pushing Agent
              mboivin

              I had the same problem a few months ago with one of my customers. The VSE 8.7 protect the computer from the possibility to install another agent since it is already managed by one.

               

              The solution if you don't have access to the old security key(like Richard said) will be to manually disable the Access Protection on the PC and install the agent of your new server.

               

              Maybe you can script it. My client decided to do it manually for his 200 PCs with the problem.

               

              Good luck !

               

              Max

              • 4. Re: Problems Pushing Agent
                lshit

                I got this sorted after a bit of head scratching.

                 

                I created an uninstall script and set it to run in GPO on computer shutdown and then on startup the new AV was pushed.

                 

                Cheers for your help