The following two issues involving McAfee anti-virus software keep coming up on all of my clients that use McAfee and any version of Configuration Manager.
1) DISM.exe generates an Error: 5 or Access Denied when VSE 8.8 Access Protection is enabled
https://kc.mcafee.com/corporate/index?page=content&id=KB76867
2) Microsoft SMS Agent Host service (ccmexec.exe) triggers the Access Protection rule: Prevent termination of McAfee processes
https://kc.mcafee.com/corporate/index?page=content&id=KB71970
I’ve discovered that the only option to overcoming the first issue is to temporarily disable McAfee on the on-access scanner. The second problem can easily be fixed by making the ccmexe.exe a trusted process.
Next week I’ll talk a bit more about anti-virus software exclusions for Configuration Manager in these blog posts:
Configuration Manager 2012 and Anti-Virus Software Exclusions for Workstations
Configuration Manager 2012 and Anti-Virus Software Exclusions for Site Servers
If you have any questions about the McAfee anti-virus software issues I just talked about, please contact me @GarthMJ or leave a note below.
[…] Please note that if you are using McAfee anti-virus software also read my blog post about McAfee and SCCM! […]
[…] make sure to also read my blog post about McAfee and SCCM if you are using McAfee anti-virus […]