The following two issues involving McAfee software keep coming up on all of my clients that use McAfee and any version of Configuration Manager.
1) DISM.exe generates an Error: 5 or Access Denied when VSE 8.8 Access Protection is enabled
2) Microsoft SMS Agent Host service (ccmexec.exe) triggers the Access Protection rule: Prevent termination of McAfee processes
I’ve discovered that the only option to overcoming the first issue is to temporarily disable McAfee on the on-access scanner.
The second problem can easily be fixed by making the ccmexe.exe a trusted process.
Next week I’ll talk a bit more about anti-virus software exclusions for Configuration Manager.