Installation or upgrade of Microsoft System Center Configuration Manager client might fail with Application Control enabled

Technical Articles ID: KB84741
Last Modified: 5/15/2020

Environment

McAfee Application and Change Control (MACC) 8.x.x, 7.x.x, 6.2.x, 6.1.x
Microsoft System Center Configuration Manager (SCCM) server

Problem

You have an SCCM server that is set up to deploy and install packages on a 32-bit or 64-bit Microsoft Windows operating system endpoint. The SCCM server communicates to the SCCM client, which is responsible for deploying the package and installing the application on the Windows endpoint. The SCCM client itself is pushed and installed by the SCCM server.

With Application Control enabled, the SCCM client installation, reinstallation, or upgrade might fail. You might observe write-denied and pkg-modification-prevented events.

Solution

To resolve the problem, a two-step configuration is needed.

Add the SCCM client installation user as a Trusted User.

Determine which account is the Client Push Installation user (SCCM client installation user) on the SCCM server:
1. From the Configuration Manager console, click Administration, expand Site Configuration, and click Sites.
2. In the top ribbon, select Client Push Installation from the Client Installation Settings drop-down list. The Client Push Installation Properties dialog box displays.
3. Click the Accounts tab. The SCCM client installation user displays in the Client Push Installation accounts section.
  
  NOTE: The account must have local administrator rights on every computer on which you want to install the SCCM client.
Add Wakeprxy.msi as an Updater.

NOTE: Make sure that you have the default MAC rules for SCCM and SMS applied.

Affected Products

Application and Change Control 8.2.x
Application and Change Control 8.1.x
Application and Change Control 8.0.x
Application and Change Control 7.0.x
Application and Change Control 6.2.x
Application and Change Control 6.1
Install/Uninstall
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Japanese

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Installation or upgrade of Microsoft System Center Configuration Manager client might fail with Application Control enabled

Environment

Problem

Solution

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Featured Solutions:Draft for New Nav

Explore Our Portfolio

Security Outcomes

Industries

Products

Featured Solutions

Explore Our Portfolio

MVISION Products

Services & Training

Threat Research

Our Researchers

Threat Landscape Dashboard

Tools

Contact Us

Resources

Downloads

Product Help

Connect with Us

Explore

Our Company

Our Efforts

Other Resources

Careers

Partnerships

Installation or upgrade of Microsoft System Center Configuration Manager client might fail with Application Control enabled

Environment

Problem

Solution

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title