+ Post New Thread
Results 1 to 1 of 1
Windows 7 Thread, Mcafee VirusScan Enterprise 7 USer Defined Access Protection Rules in Technical; Hi there, I have a bit of a problem and I'm wondering if anyone can help. I'm running VSE8.7.0i, patch ...
  1. #1

    Join Date
    Nov 2007
    Location
    Rotherham
    Posts
    1,675
    Thank Post
    122
    Thanked 126 Times in 102 Posts
    Rep Power
    45

    Mcafee VirusScan Enterprise 7 USer Defined Access Protection Rules

    Hi there,

    I have a bit of a problem and I'm wondering if anyone can help. I'm running VSE8.7.0i, patch 3 and the latest DAT's and Engine. I have set up a number of user defined rules in access protection policies to prevent the student in my school running files from a number of locations. I am blocking all processes the the folder/file name "h:\**\*.bat" This stops users creating batch files from their home area (see attached Image). I have an almost identical one for their destop, removable drives (E:/F and a couple of other places. This has been running fine for years on my XP machines however I recently purchased some Win 7 Machines and hit a problem. I noticed initally when I suddenly lost all my network drives. A little research showed this in the access protection log.

    Code:
     
    03/08/2010 14:10:43 Blocked by Access Protection rule  <domain>\<user> C:\Windows\system32\userinit.exe \Device\Mup\<servername>l\netlogon\lginscrpt.bat User-defined Rules:BAT From H Action blocked : Read
    03/08/2010 14:12:55 Blocked by Access Protection rule  NT AUTHORITY\SYSTEM C:\Windows\system32\gpscript.exe \Device\Mup\<domain>\SysVol\Domain>\scripts\PhotoStory.bat User-defined Rules:BAT From H Action blocked : Read

    Now for some reason the rule is blocking access. If I disable the rule then the next similar rule will block the file. If I disable all the rules then the batch file works. The thing is that this works on XP machines, I also cannot see how this location has violated the rule condtition. If I exclude those two processes then the flie is still blocked but the process is changed to cmd.exe which I didn't want to exclude as I want to make sure I stop the pupils running the batch files (rather than just gamling they are all run under the explorer process when in windows.

    I also noticed that my exe blocking rule is stopping me copying files even though the source and destination locations don't violate the rule.

    Anyone had anything similar or any ideas?
    Attached Images Attached Images

SHARE:
+ Post New Thread

Similar Threads

  1. New ISA 2006 Enterprise Install - No Array Rules Work, Enterprise Default Denies Them
    By link470 in forum Internet Related/Filtering/Firewall
    Replies: 1
    Last Post: 19th February 2010, 03:04 AM
  2. [SIMS] Photo lists from user defined groups [Solved]
    By _techie_ in forum MIS Systems
    Replies: 13
    Last Post: 3rd December 2009, 08:55 AM
  3. SIMS - User Defined Fields
    By Ecalpemos2000 in forum MIS Systems
    Replies: 2
    Last Post: 14th November 2009, 06:25 AM
  4. SIMs.net - User defined fields in reports?
    By duncane in forum MIS Systems
    Replies: 4
    Last Post: 21st September 2008, 08:07 AM
  5. Sims.net (unique user defined reports missing)
    By edie209 in forum MIS Systems
    Replies: 3
    Last Post: 15th June 2006, 12:17 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •