2 Replies Latest reply on Jan 14, 2016 11:55 AM by Aidan

    McAfee PortalShield for SharePoint



         We are getting a lot of these errors in the event log. We are using SharePoint 2010 SP2 on Windows 2008 R2.

          If anyone can offer help on how to get rid of them we would greatly appreciate it.

      Log Name:      Application

      Source:        Application Error

      Date:          1/14/2016 8:19:02 AM

      Event ID:      1000

      Task Category: (100)

      Level:         Error

      Keywords:      Classic

      User:          N/A

      Computer:      Server.vbgov.com


      Faulting application name: PSPickerx64Srv.exe, version:, time stamp: 0x51d67fdd

      Faulting module name: MSVCP80.dll, version: 8.0.50727.6229, time stamp: 0x4ec340fd

      Exception code: 0xc0000005

      Fault offset: 0x000000000002bb72

      Faulting process id: 0x24f8

      Faulting application start time: 0x01d14ece21645fa7

      Faulting application path: C:\Program Files (x86)\McAfee\McAfee PortalShield\bin\PSPickerx64Srv.exe

      Faulting module path: C:\Windows\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none _88dcc0bf2fb1b808\MSVCP80.dll

        • 1. Re: McAfee PortalShield for SharePoint

          Discussion moved from Community Interface Help to Security for Microsoft Sharepoint (PortalShield)




          • 2. Re: McAfee PortalShield for SharePoint

            When I see this it usually that psPickerx64Srv process is trying to run with account with insuffient privileges to allow the process to launch or there are multiple ones listed in task manager (not closed during an upgrade possibly)  


            You could try something like this - use the farm admin as a test  - this can be changed at any time and there is a section in the guide to assist in creating an account with least privileges required (appendix A) .... but give this a go ..


            In Services applet - stop the McAfee Portalshield service.
            Access task manager and ensure all our processes have left task manager. These are:-
            Safeservice.exe, RPCServ.exe (2), several Postgres.exe processes and PSPickerx64Srv.exe.
            (Kill any of these processes that remain).

            Run Cmd prompt with fulll admin account - Right click CMD Icon and select "Run with Administrator" if User Access Control in enabled in Windows


            In this cmd prompt window cd to <msms install folder>bin and run setsqlact.exe as follows


            SetSqlAct.exe /USER=SPFarmAdmin /PASSWORD=ThePassword! /DOMAIN=SPDomain.
            (Obviously substitute the correct entries for your Domain\SPFarmadmin and password)

            It should state the user credentials have successfully been changed once done.


            Now start the McAfee Portalshield Service again.

            Open Interface
            - OAS should show enabled
            - Test OD Scan config  - you should be able to select "Scan Selected Folder" and expand Workspaces.
            (This will be blank if wrong account is used)

            Check Task Manager    


            Safeservice.exe, RPCServ.exe (2), several Postgres.exe processes should all be loaded under system account
            PSPickerx64Srv.exe - should be loaded under your SPFarmAdmin account.


            As stated you can change the account at any time with SetSQLAct  -  but - that account must have sufficient privileges as per details in Guide.