McAfee Anti-Virus Software and SCCM

The following two issues involving McAfee anti-virus software keep coming up on all of my clients that use McAfee and any version of Configuration Manager.

1) DISM.exe generates an Error: 5 or Access Denied when VSE 8.8 Access Protection is enabled
https://kc.mcafee.com/corporate/index?page=content&id=KB76867

2) Microsoft SMS Agent Host service (ccmexec.exe) triggers the Access Protection rule: Prevent termination of McAfee processes
https://kc.mcafee.com/corporate/index?page=content&id=KB71970

I’ve discovered that the only option to overcoming the first issue is to temporarily disable McAfee on the on-access scanner. The second problem can easily be fixed by making the ccmexe.exe a trusted process.

Next week I’ll talk a bit more about anti-virus software exclusions for Configuration Manager in these blog posts:

Configuration Manager 2012 and Anti-Virus Software Exclusions for Workstations

Configuration Manager 2012 and Anti-Virus Software Exclusions for Site Servers

If you have any questions about the McAfee anti-virus software issues I just talked about, please contact me @GarthMJ or leave a note below.
McAfee Anti-Virus Software and SCCM

Viruses on Laptop
Showing 2 comments
pingbacks / trackbacks

Leave a Comment

Typing on Keyboard
Share via
Copy link