Outlook 2010 Trust Center reports an inconsistent Antivirus status as Invalid or Valid across multiple clients
技術的な記事 ID:
KB69778
最終更新: 6/17/2020
環境
McAfee VirusScan Enterprise (VSE) 8.x
Microsoft Office 2010
Microsoft Outlook 2010 Trust Center
Microsoft Antivirus API
問題
Outlook 2010 Trust Center can report an inconsistent antivirus status under Tools, Trust Center, Programmatic Access.
When this issue occurs, systems with valid VirusScan Enterprise (VSE) installations might report either of the following:
Antivirus status: Invalid
Antivirus status: Valid
原因
Outlook Trust Center is not a supported feature of VSE. Outlook can sometimes detect the antivirus program through Windows Security Center. If the Security Center service is stopped, Outlook might not recognize VSE.
解決策
Because VSE does not currently support this feature, Outlook users are referred to the Windows Security Center for the status of the antivirus product. VSE continues to correctly scan emails regardless of the status shown in the Outlook Trust Center.
{GENPER.EN_US}
NOTE: McAfee customers report that starting the Windows Security Center service sometimes allows Outlook to show the correct status in the Trust Center.
Customers can use the following workarounds, but there is no guarantee that they resolve the issue.
回避策
Windows
- Verify if Windows Management Instrumentation (WMI) properly detects the presence of VSE:
- Click Start, Run, type wbemtest and press Enter.
- Click Connect.
- In the Namespace text field, type root\SecurityCenter2, and click Connect.
- Click Query, type Select * From AntivirusProduct and click Apply.
The result window shows an InstanceGUID entry for each antivirus product installed. If no antivirus product is installed, or if the system can't find what product is installed, the results are empty. If result is empty with VSE installed, go to Step 2.
- Double-click an entry from the results window.
- In the resulting window, note the following properties and their corresponding values:
ProductState determines if VSE is enabled/disabled (Values):
productState=262144 = Up to Date Defs, On Access Scanning OFF
productState=266240 = Up to Date Defs, ON Access Scanning ON
- Enable Security Center in Group Policy.
You can use this procedure to install Group Policy Management (GPM) and enable Security Center on Network Access Protection (NAP)-capable clients using Group Policy. Security Center is required for some NAP deployments that use Windows Security Health Validator. Membership in Domain Admins or equivalent, is the minimum privilege required to complete this procedure.
NOTE: If you have GPM installed already, go to Enable Security Center in Group Policy.
- Install GPM:
- Click Start, Server Manager.
- In the left pane, click Features.
- In the details pane, in Features Summary, click Add Features. The Add Features Wizard opens.
- In Select Features, in Features, select Group Policy Management, and click Next.
- In Confirm Installation Selections, click Install.
- In Installation Results, review the information and then click Close.
- Enable Security Center in Group Policy:
- Click Start, Run, type gpmc.msc and press Enter.
- In the left pane, expand your forest.
- Expand Domains, then double-click the domain that contains the Group Policy that you want to manage.
- Right-click Default Domain Policy, and left-click Edit.
- In the console tree, expand Computer Configuration, then expand Administrative Templates.
- Expand Windows Components, and double-click Security Center.
- Double-click Turn on Security Center (Domain PCs only), click Enabled, then click OK.
- Run a Group Policy update on the client:
- Close Outlook if appropriate.
- Click Start, Run, type cmd, and press Enter
- Type Gpudate and press Enter.
This command enforces group policies.
- Start the Security Center Service:
- Click Start, Run, then type services.msc and press Enter.
- Locate and right-click the Security Center service and select Enable.
- Ensure you are running the latest DAT on VSE. To find out your DAT version:
- Right-click the McAfee icon in the system tray and select About.
- Scroll down to the DAT version information.
- Start Outlook and check the Trust Center:
- Click File, Options, Trust Center, Trust Center Settings.
- Click OK when done.
|