Installation or upgrade of Microsoft System Center Configuration Manager client might fail with Application Control enabled

Technical Articles ID: KB84741
Last Modified: 5/15/2020

Environment

McAfee Application and Change Control (MACC) 8.x.x, 7.x.x, 6.2.x, 6.1.x
Microsoft System Center Configuration Manager (SCCM) server

Problem

You have an SCCM server that is set up to deploy and install packages on a 32-bit or 64-bit Microsoft Windows operating system endpoint. The SCCM server communicates to the SCCM client, which is responsible for deploying the package and installing the application on the Windows endpoint. The SCCM client itself is pushed and installed by the SCCM server.

With Application Control enabled, the SCCM client installation, reinstallation, or upgrade might fail. You might observe write-denied and pkg-modification-prevented events.

Solution

To resolve the problem, a two-step configuration is needed.

Add the SCCM client installation user as a Trusted User.

Determine which account is the Client Push Installation user (SCCM client installation user) on the SCCM server:
1. From the Configuration Manager console, click Administration, expand Site Configuration, and click Sites.
2. In the top ribbon, select Client Push Installation from the Client Installation Settings drop-down list. The Client Push Installation Properties dialog box displays.
3. Click the Accounts tab. The SCCM client installation user displays in the Client Push Installation accounts section.
  
  NOTE: The account must have local administrator rights on every computer on which you want to install the SCCM client.
Add Wakeprxy.msi as an Updater.

NOTE: Make sure that you have the default MAC rules for SCCM and SMS applied.

Affected Products

Application and Change Control 8.2.x
Application and Change Control 8.1.x
Application and Change Control 8.0.x
Application and Change Control 7.0.x (EOL)
Application and Change Control 6.2.x
Application and Change Control 6.1 (EOL)
Install/Uninstall
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro

Knowledge Center

Installation or upgrade of Microsoft System Center Configuration Manager client might fail with Application Control enabled

Environment

Problem

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Installation or upgrade of Microsoft System Center Configuration Manager client might fail with Application Control enabled

Environment

Problem

Solution

Affected Products

Languages:

Choose your region

Title

Title