McAfee Anti-Virus Software and SCCM

The following two issues involving McAfee software keep coming up on all of my clients that use McAfee and any version of Configuration Manager.
1) DISM.exe generates an Error: 5 or Access Denied when VSE 8.8 Access Protection is enabled
https://kc.mcafee.com/corporate/index?page=content&id=KB76867

2) Microsoft SMS Agent Host service (ccmexec.exe) triggers the Access Protection rule: Prevent termination of McAfee processes
https://kc.mcafee.com/corporate/index?page=content&id=KB71970

I’ve discovered that the only option to overcoming the first issue is to temporarily disable McAfee on the on-access scanner.
The second problem can easily be fixed by making the ccmexe.exe a trusted process.
Next week I’ll talk a bit more about anti-virus software exclusions for Configuration Manager.