Application Control 7.x.x Known Issues

Technical Articles ID: KB87447
Last Modified: 5/2/2022

Environment

Application Control 7.x.x

Summary

Recent updates to this article

Date	Update
May 2, 2022	Minor formatting updates; no content changes.

To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.

Contents
Click to expand the section you want to view:

Product release information

Version	General Availability	Release Notes
7.0.2	March 13, 2018	Release Notes
7.0.1	July 19, 2016
7.0.0	February 22, 2016

Issue resolutions in updates and major releases are cumulative; Technical Support recommends that you install the latest version. To find the most recent release for your product, go to the Product Downloads site.

Application Control 7.0.2 known issues

Critical: There are no known critical issues.

Non-critical:

Solidcore Extension

Reference Number	Related Article	Found in Version	Resolved in Version	Description
915885	KB81304	All versions		Issue: Application Control endpoint inventory parsing might cause the SCOR_DATA_CHANNEL table to grow quickly in the ePolicy Orchestrator (ePO) database.
	KB88255	All versions		Issue: There are Self Approval Client pop-up text field limitations within Application Control. Resolution: The Self Approval Client pop-up text field has a maximum character limitation of 296 characters. The text field for Self Approval within ePO has a maximum character limitation of 300. Because of the fixed nature of the text field, scrolling of text within the pop-up field on the client isn't allowed.
1173493	KB88261	7.x, 8.x	8.1.1.103	Issue: You're not authorized for this operation (when clicking the helpdesk notification link of the Request Approval URL in Application and Change Control (ACC)).
1186364	KB89430	All versions		Issue: Application Control events are reported back to the ePO server from a client that only has Change Control enabled.
1203024		All versions	8.1.1	Issue: Skiplist exclusion filters with asterisk in the path can't be saved.
1241551	KB90779	All versions	8.2.0	Issue: Application Control Policy Discovery events are missing when extension 8.1.0.129 or 8.1.1.103 is installed.
1249255	KB90787	All versions	Won't fix	Issue: Duplicate users appear in client policy when the Trusted Users group is synchronized with the Active Directory (AD).
1249451	KB90818	All versions		Issue: High event flow in the SCOR_FD_Data_Channel temporary table results in a deadlock and events stacking up.
1270782 1270891 1247470	KB91532	All versions	Won't fix	Issue: Server task "Solidcore: Send Policy and Inventory Feedback to McAfee GTI Server" runs indefinitely.

Windows (all versions)

Reference Number	Related Article	Found in Version	Resolved in Version	Description
		All versions	McAfee Agent (MA) issue	Issue: MA high CPU consumption.
		7.x, 8.x		Issue: ACC blocks the Windows Defender Update process.
	KB88915	All versions		Issue: Exclusions for Endpoint Security (ENS) or VirusScan Enterprise with ACC to improve post-install performance.
1179655 1164544 1164554		All version		Issue: deny_reason="File-cksum-mismatch" (generated when executables are configured as updaters in Application Control).
	KB88747	All versions		Issue: Web MER.exe is blocked on the client while Application Control is in enabled mode. Resolution: Update to the latest extensions.
	KB86758	All versions	Won't fix	Issue: Application Control denies .zip files when run in the context of Java.exe or Javaw.exe
1272591	KB86638	All versions		Issue: Performance issues on Application Control endpoints when Global Threat Intelligence and Threat Intelligence Exchange communication fails.
	KB77610	All versions		Issue: Application Control and Change Control might not switch the protection mode with Windows FBWF installed.
1267203		7.0.2		Issue: February Microsoft Updates fail on ACC 7.0.2.
1267181		7.0.2		Issue: Execution Denied (checksum-mismatch) when a file is modified through a hardlink.
1261196		7.0.2		Issue: Microsoft patch installation fails and rolls back.
1259045		7.0.2		Issue: Updated dlls aren't updated in the local allow list.
	KB89866	7.x, 6.x		Issue: Installation of ACC fails when running a batch file containing the /qb+ switch on Windows Vista clients.
	KB90849	All versions		Issue: File Write Denied events are recorded when a change of the edb.log file is attempted.
	KB91257	All versions		Issue: Application Control and Change Control driver issues (Windows Update).
1273074 1274763	KB91569	7.x, 8.x		Issue: Updater rights and permissions are unexpectedly granted to svchost.exe.

Windows 8:

There are currently no new known issues.

Windows 10:

There are currently no new known issues.

Application Control 7.0.1 known issues

Critical: There are no known critical issues.

Non-critical:

Solidcore Extension

Reference Number	Related Article	Found in Version	Resolved in Version	Description
608347				Issue: The Solidcore Policy Assignments By System report displays all policies derived from the root, regardless of the SKUs enabled on the platform.
609304				Issue: You can't export data from the Reporting, Solidcore Events page. Workaround: Use Queries (Reporting, Queries) to export event data.
607554				Issue: Solidcore policies can't be duplicated by using the Policy Details page because the OK button is disabled. Workaround: Use the Policy Catalog page to duplicate policies.
608374				Issue: When trying to enable an already enabled Solidcore Agent, the error displayed isn't translated.
609911				Issue: Export of rule groups doesn't work in Internet Explorer when opened from the ePO server. Workaround: Use Internet Explorer from a different computer to export rule groups.
609220				Issue: Saving an Application Control policy that's a copy of the Default policy is slow. Workaround: Because Application Control policies are multi-slot policies, Technical Support recommends that you create a new blank policy and add new rules to it instead of copying and changing the Default policy.
719796				Issue: Global catalog search for AD groups isn't supported. Workaround: Search for a group in a specific AD server instead of using the Global Catalog. To add a specific group, perform the steps below: Log on to the ePO console. Add the AD server with the group as a Registered Server. Search for the group by selecting the registered AD server. Make sure that the Use Global Catalog option is deselected. Add the group to a policy as a trusted group.
890978				Issue: The GTI cloud server entry isn't removed from ePO after the Solidcore Extension is uninstalled.
950063				Issue: A few Strings aren't properly localized in languages other than English.
939528				Issue: Systems with a large inventory fail to send inventory data to the ePO server and a corresponding entry is logged in the Server Task Log after six hours.
987715				Issue: For the Application Control Options (Windows) policy, an import of a policy from Extensions earlier than 6.2.0 causes the Inventory AEF tab to populate with its default value. Default values aren't saved in the policy until you make some change and save the policy.
1050955				Issue: With ePO 5.x, GTI communication using Kerberos authentication fails when using a proxy server.
1109570				Issue: You can edit the Application Control, Change Control, and IM dashboards after you migrate from ePO 4.6.9 to ePO 5.1.3.
1147342				Issue: In 7.0.1, the SMS 2003 Client rule group is renamed to SCCM or SMS Client, and SMS 2003 Server rule group is renamed to SCCM or SMS Server. After you upgrade, if you save an existing policy that uses one of these rule groups, the renamed rule group is disassociated from the policy. Workaround: Search for the SCCM or SMS Client and SCCM or SMS Server rule groups and add the groups to your policy.
1224811	KB90254	7.0.0	7.0.2	Issue: A GTI communication error occurs between server and client, with ACC installed.

Reference Number	Related Article	Found in Version	Resolved in Version	Description
	KB79201			Issue: For JAR files, the Java interpreter can run a JAR file from any extension. Renaming a valid JAR file to a file with a different extension still allows it to be executed. Workaround: See the Knowledge Base article for details.
794445				Issue: Solidified batch files, when copied using another batch file, fail.
808857				Issue: A Self Approval pop-up window displays if a file is opened with the execute flag even if the file isn't executed.
916640				Issue: Deny Execution isn't skipped for a drive after removing the skiplist -v flag without a reboot. Workaround: A reboot is needed to make it work.
1112186				Issue: Application Control 7.0.0 supports the proxy without authentication for the GTI feature on endpoints. If the proxy is set without authentication, you can use commands in the netsh winhttp context to configure proxy and tracing settings for Windows HTTP. You can run the netsh commands for winhttp manually at the netsh prompt or in scripts and batch files.
1132183				Issue: System lockup occurs when you uninstall the ENS Threat Prevention module. Workaround: Add c:\windows to skiplist rule -i Ignore path passthrough attribute before you uninstall the ENS Threat Prevention module. Then after removal, remove this rule. Or, disable Application Control to uninstall the ENS Threat Prevention module and enable after you uninstall ENS Threat Prevention.
1194481, 1194580				Issue: Blue screen error occurs when Application Control checks to see if a file is managed and the file header doesn't contain IMAGE_NT_HEADERS.
1261321		7.0.1		Issue: Windows logon process is stopped owing to swin.sys.
1267968		7.0.1		Issue: Memory Protection (MP) can't be enabled in Windows 10 with a secure boot.
	KB89359	7.0.1	8.0.0	Issue: Google Chrome displays an "Aw Snap!" error when attempting to browse websites while Application Control 7.0.1 Memory Protection is enabled.
1171705		7.0	MA issue	Issue: Policy is unexpectedly enforced after a reboot when set to not enforce.
	KB89459	7.0.1.402	7.0.1.413	Issue: Windows Update DLL files don't load properly until Application Control (Standalone) is placed in an enabled state.
1197702	KB89466	7.0.1.413	7.0.1 HF5	Issue: Script As Updater injection into all application and system processes results in degraded performance and system crashes.
	KB89565	7.0.1 HF4	Won't fix	Issue: Systems might fail to boot or load the Application Control driver after installing Application Control 7.0.1 Hotfix 4. Resolution: Install Microsoft Security Advisory 3033929.
1203341	KB89678	7.0.1.413		Issue: ACC prevents installation of ENS. Workaround: Disable Memory Protection.

Windows 8

Reference Number	Related Article	Found in Version	Resolved in Version	Description
959413				Issue: You're unable to install an MSI-based package on x86 in Update or Enable mode.

Windows 10

Reference Number	Related Article	Found in Version	Resolved in Version	Description
1188255	KB91257	7.0.0	8.2.1 Update 3 8.0.2 Update 1	Issue: ACC prevents the Windows Defender Update process from running successfully. Solution: Apply the correct update for your version of Application Control: Application Control 8.2.1 Update 3 Application Control 8.0.2 Update 1 See KB91257 - Application Control and Change Control driver issues (Windows Update) for further guidance.

Application Control 7.0.0 known issues

Critical: There are no known critical issues.

Non-critical:

Solidcore Extension

Reference	Article	Found in Version	Resolved in Version	Description
608618				Issue: When you try to upload the Windows Solidcore Agent Deployment Package (~100 MB) to ePO through Microsoft Internet Explorer (Internet Explorer), the file upload times out if the network upload speed is slow. Workaround: If an error displays in Internet Explorer 6, try using Internet Explorer 7 (or later). If you encounter the error in Internet Explorer 7 or later, copy the package to a local directory on the ePO server. Next, access the ePO console on the ePO server and upload the file from the local path. This method avoids possible network delays.
607517				Issue: PDF reports have minor data display and formatting issues if more than 50,000 records are reported.
608347				Issue: The Solidcore Policy Assignments By System report displays all policies derived from the root, regardless of the SKUs enabled on the platform.
609304				Issue: It's not possible to export data from the Reporting, Solidcore Events page. Workaround: Use Queries (Reporting, Queries) to export event data.
636769				Issue: If you upgrade from ePO 5.1.0 to 5.1.1 (or later), existing Solidcore events in the Solidcore Events table aren't migrated to the ePO Events table.
636352				Issue: After removing the Solidcore Extension, all Solidcore-related events are retained in the ePO table. When you view the events in the Threat Event Log, some fields might display garbage data.
607554				Issue: Solidcore policies can't be duplicated by using the Policy Details page because the OK button is disabled. Workaround: Use the Policy Catalog page to duplicate policies.
608374				Issue: When trying to enable an already enabled Solidcore Agent, the error displayed isn't translated.
607908				Issue: It's not possible to export more than 50,000 records from any table or report.
608025				Issue: Reports, tasks, and policies for all SKUs are listed even if the license for that SKU isn't added.
609911				Issue: Export of rule groups doesn't work in Internet Explorer when opened from the ePO server. Workaround: Use Internet Explorer from a different computer to export rule groups.
608753				Issue: Sometimes, using the username field of reported events in ePO as a trusted user might not work if the client system is part of an AD domain, because the domain name reported in the events isn't the full AD domain. Workaround: Use the environment variable USERDNSDOMAIN of the AD client as the domain name. Or, review the properties of the My Computer icon to identify the complete username to specify as the trusted user.
609220				Issue: Saving an Application Control policy that's a copy of the Default policy is slow. Workaround: Because Application Control policies are multi-slot policies, Technical Support recommends that you create a new blank policy and add new rules to it instead of copying and changing the Default policy.
607950				Issue: User-defined system variables in policies are resolved at the endpoint only after the endpoint is restarted.
719796				Issue: Global catalog search for AD groups isn't supported. Workaround: Search for a group in a specific AD server instead of using the Global Catalog. To add a specific group, perform the following: Log on to the ePO 4.x console. Add the AD server with the group as a Registered Server. Search for the group by selecting the registered AD server. Make sure that the Use Global Catalog option is deselected. Add the group to a policy as a trusted group.
722045				Issue: When you add new columns, such as Solidcore Status and Solidification Status, for an endpoint by clicking Actions, Choose columns, Non Compliant Solidcore Agent, it might not display values for all endpoints. This issue happens because the Noncompliant Solidcore Agent section includes only noncompliant agent properties. Workaround: When you add new columns for an endpoint, click Actions, Choose columns, Solidcore Client Properties instead of Actions, Choose columns, Noncompliant Solidcore Agent.
812003				Issue: The Self Approval page displays a link for .MSI based applications, which displays an empty list when drilling down.
890978				Issue: The GTI cloud server entry isn't removed from ePO after the Solidcore Extension is uninstalled.
926122				Issue: File Deviation details are missing in an exported file from the Image Deviation page.
950063				Issue: A few Strings aren't properly localized in languages other than English.
1033281				Issue: Upgrade to Solidcore Extension 6.2.0 might fail immediately after extension restart while performing an upgrade from a version older than 6.1.2.
939528				Issue: Systems with a large inventory fail to send inventory data to the ePO server and a corresponding entry is logged in the Server Task Log after 6 hours.
987715				Issue: For the Application Control Options (Windows) policy, an import of a policy from Extensions earlier than 6.2.0 causes the Inventory AEF tab to populate with its default value. Default values aren't saved in the policy until you make some change and save the policy.
1043052				Issue: You can't upgrade Solidcore help extension from previous versions to 6.2. Workaround: Uninstall the old help extension and install the new one.
1050955				Issue: With ePO 5.x, GTI communication using Kerberos authentication fails when using a proxy server.
1109570				Issue: The Application Control, Change Control, and IM dashboards are editable after migration from ePO 4.6.9 to ePO 5.1.3.
1104452	KB86184			Issue: There are multiple alerts for the automatic response "Bad Binary has been detected in Enterprise" after upgrading to Solidcore Extension 7.0.x.
1148388				Issue: Advanced Filters on the Solidcore Events page aren't working. Workaround: Click the Advanced Filters link. From the left pane, select the Available Property for the filter (Example: System Name). Type the Value for the selected property. Click the drop-down list for comparison and change the selection from Equals to Not Equals and then change it back to Equals. Click Update Filter. NOTE: These steps must be performed for each of the filter criteria being used. Make sure that the steps are performed in the order listed. Deviation results in the filter not saving.
	KB84651	All versions	8.0.0.182	Issue: Upgrading the extension for Application Control 6.2.0 and later takes a long time to complete.
1104452	KB86184	7.0.0		Issue: Multiple alerts are seen for the automatic response "Bad Binary has been detected in Enterprise" after upgrading to Solidcore Extension 7.0.x.
1130244	KB87004	7.0.0-270	7.0.1	Issue: SOLIDCORE_META - Unable to load native library (when you log on to the ePO console)
	KB87461	7.0		Issue: You see inconsistent results after you add Application-Control-related columns to the System Tree or Threat Event pages.
	KB87648	7.0		Issue: The DELETE statement conflicts with the REFERENCE constraint (when ACC events are purged from ePO).
	KB88248	All versions		Issue: Stale records appear on the Inventory page when a Purge System Inventory task is run immediately after a client is removed from ePO.

Reference	Article	Found in Version	Resolved in Version	Description
	KB79201			Issue: For JAR files, the Java interpreter can run a JAR file from any extension. Renaming a valid JAR file to a file with a different extension still allows it to be executed. Workaround: See the Knowledge Base article for details.
801531				Issue: If Driver Verifier (verifier.exe) is enabled, Application Control or Change Control might not function as expected.
608418				Issue: The Original Username reported in events is the same as the Username.
600805				Issue: While opening a write-protected network share in File Explorer, a few deny-write errors are observed.
603747				Issue: The trusted, solidified, and write-protect features don't work correctly for folder-mounted volumes. Workaround: Contact Technical Support for assistance if the setup uses folder-mounted volumes.
608036				Issue: Mapped drive names can't be used in commands issued by remote users or ePO.
595570 595025 595511 595615 597243 598406 595043 607434 607899 611229				Issue: The following applications are incompatible with the Solidcore Agent for Windows. Contact Technical Support for further assistance. Panda Titanium Antivirus 2005 Spyware Doctor BlackIce Trojan Hunter BitDefender BufferZone Twister Anti-Trojan Virus 2005 Trend Micro OfficeScan 8.0, Trend Micro Antivirus 2008 Double-Take Cisco Security Agent
594579				Issue: Unsolidified scripts can't be copied using the MS-DOS command prompt on a solidified system. Any read access to unsolidified scripts by a script interpreter configured for that script is denied, which generates unauthorized execution events. To avoid these problems, perform the file operation using Windows Explorer.
608647				Issue: On 64-bit systems, multiple events might be generated when an unauthorized binary file is executed. The Windows operating system tries to run the binary multiple times by using a reduced set of attributes until final failure.
608745				Issue: Files that are read-protected by the user (using the 'sadmin read-protect' command) can't be solidified.
643688				Issue: If you try an ActiveX installation before enabling the ActiveX feature and retry the installation after enabling the ActiveX feature, ActiveX might not get installed properly. Workaround: If the ActiveX installation fails, delete all files in the \windows\downloaded program files directory on the endpoint, and remove all .cab files in the temporary Internet files. Then, install the ActiveX control on the endpoint.
602194				Issue: The package control feature can't stop the installation of some applications, such as Gvim and Winrar.
616147				Issue: For standalone Solidcore Agent installation (in other words, installation not done via ePO) on endpoints where Oracle is installed, you must run finetune.bat manually at the endpoints to apply Oracle-specific rules.
599348			Won't fix	Issue: On viewing the properties of a file on the local drive, deny-write and deny-exec events are generated for the solidified and unsolidified files, respectively.
601126				Issue: When copying solidified files to a rewritable CD, although the files are copied successfully, deny-write errors are logged.
601427				Issue: On 64-bit platforms, Enum or Performance in sub keys is bypassed from Solidcore Agent protection. Thus, when you delete a write-protected registry key with Enum or Performance in sub keys, you might get a partial completion status.
616089				Issue: In the output of the sadmin diag command on the Spanish locale, read 'actualizadores agregar' as 'updaters add'. For example, the following output * actualizadores agregar -t DIAG: cmd.exe -p explorer.exe ""cmd.exe"" should be read as * updaters add -t DIAG: cmd.exe -p explorer.exe ""cmd.exe""
600748				Issue: Multiple deny-write events can be generated for a single deny-write action. For example, on deletion of a file using Windows Explorer, up to eight file deletion events are reported. When the application denies deletion of a file, Windows Explorer tries multiple methods to delete the file, resulting in an event for each attempt.
695246				Issue: Although the Solidcore NX protection is based on system DEP, it's possible that some applications work with system DEP but not with Solidcore NX. In such cases, if processes are added to the Solidcore NX bypass list, the system DEP protection is enabled for the processes.
720663				Issue: Editing the Updater Label for an existing trusted publisher in an Application Control policy fails. Although the label changes in the ePO console, the change isn't reflected on the endpoints.
713989				Issue: If Application Control and Spector are installed on an endpoint and MP-CASP is enabled, Internet Explorer crashes.
652602				Issue: If you disable the deny-exec-exes feature on any Windows (64-bit) operating system, change the extension of an exe to .sys, and try to run the .sys file, execution of the .sys file is prevented. Or, if you change the file extension to dll, you can run the file even if the deny-exex-dlls feature is enabled.
607574				Issue: On opening a network share (for systems running Windows Vista, Windows 7, and Windows 2008), deny-write and deny-exec events are generated for the binary files present on the network share. These events occur because Windows Explorer tries to fetch the icons for the files stored on the network share.
768708				Issue: You're unable to set the flag fs-passthru 'p' and the flag vasr forced reloc 'v' together with the extra information flag 'o' in the attr command.
770362				Issue: You're unable to set more than one dll to bypass from VASR forced reloc.
794445				Issue: Solidified batch files, when copied using another batch file, fail.
803731				Issue: With network tracking disabled, Self Approval functionality doesn't work for network shares.
803948				Issue: Deny-Exec on a Script file is reported if Network tracking is disabled on a 64-bit architecture.
808857				Issue: A Self Approval pop-up displays if a file is opened with the execute flag even if the file isn't executed.
808964				Issue: An Auth rule for a process making file changes doesn't get added correctly if allowed through Self Approval.
812964				Issue: If you remove the Updater flag for a certificate rule, the certificate is still listed as an Updater on the endpoint.
816108				Issue: A file, authorized by checksum, is denied for execution when run from a network share.
810072				Issue: While running a 16-bit executable with Self Approval enabled, the file type is listed as script.
819876				Issue: A process that doesn't work as an Updater is configured as an Updater through auth by checksum. Workaround: Configure the process as an Updater by name.
888634				Issue: An unclean uninstallation of Adobe Flash Player occurs when pkg-ctrl-allow-uninstall is enabled. Workaround: sadmin updaters add "C: \WINDOWS\system32\Macromed\Flash\FlashUtil32_11_6_602_180_ActiveX.exe".
888632				Issue: A repair of .NET 3.5 fails. Workaround: Add the below Updater rules: C: \WINDOWS\system32\msiexec.exe C: \WINDOWS\syswow64\msiexec.exe
885091	KB78642			Issue: You're unable to install Visual Studio 2010 Ultimate via Updater. Workaround: See the Knowledge Base article for details.
887965				Issue: Uninstallation of applications isn't blocked even if the pkg-ctrl-allow-uninstallation feature is disabled. Workaround: Run the sadmin clg command after each installation of an application to block the removal. This command clears out all cached GUIDs from the system.
888878				Issue: Multiple package control prevention events are seen while uninstalling and repairing Visual Studio 2010. Workaround: Add "\Microsoft SDKs\Windows\v7.0A\Bin" to trusted path: "sadmin trusted -u "\Microsoft SDKs\Windows\v7.0A\Bin".
884396				Issue: You're unable to install Adobe Flash Player 11 when the pkg-ctrl-bypass feature is enabled. Workaround: sadmin updaters add InstallAX_11_6_602_180.exe.
883381				Issue: Self Approval pop-ups for a user session are displayed on a console session instead of a user session. Workaround: Run the following Solidcore commands from the command line: sc config AeLookupSvc type= own sadmin updaters add -l aelupsvc.dll svchost.ex
915562	KB79517			Issue: Solidifier upgrade from 6.1.1 to 6.1.2 fails in Observe mode. Workaround: See the Knowledge Base article for details.
910080				Issue: Package Control, if an application has ctor.dll in its uninstall string, and another application using ctor.dll, isn't installed when pkg-ctrl-allow-uninstall is disabled. Workaround: As a workaround for mode 1 of package control, the user can make the ctor.dll an Updater using the complete path. Example: C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll. For Package Control modes, see PD24669.
916640				Issue: Deny Execution isn't skipped for a drive after removing the skiplist -v flag without a reboot. Workaround: A reboot is needed to make it work.
910485	KB79658			Issue: Package Control removal of an application fails using Add/Remove Programs if an application is installed for a particular user. Workaround: See the Knowledge Base article for details.
901147				Issue: Installer (Auto-IT), first shown as script type, after copying to some other location, is showing as pe32-exe.
911678				Issue: Package Control is unable to repair Visual Studio 2010 Ultimate if installed in Update mode.
903914				Issue: You see File Write-Denied events when you run .exe files, marked as an Updater, by double-clicking them.
919300				Issue: A Trusted Path operation fails if the operation is performed on a local share mounted as a network share locally.
920568	KB79987	6.x	8.0.0.651	Issue: The upgrade version isn't updated on the ePO server and the McTray About field after an endpoint upgrade. Workaround: See the Knowledge Base article for details.
940286				Issue: A Pkg-modification-prevented event is raised during an Application Control upgrade.
948349				Issue: Multiple deny-write events for a Self Approval pop-up for putty.exe are recorded when execution is performed after downloading the file from the internet.
940085	KB73484			Issue: There's a known incompatibility between Application Control and SafeNet ProtectFile: File Encryption and Protection software.
953257				Issue: Script files can execute from the unsolidified drive on the system.
1020973				Issue: Adobe32 stops working with MPCompat. Workaround: To resolve this issue, use one of the following workarounds: (Recommended) Disable VSE BOP or put adobe32 in the escape list of VSE BOP. Disable MP CASP and MP VASR for Adobe32. Disable Adobe32 protection mode.
1027687	KB84043	All versions		Issue: Upgrade to Application Control or Change Control 6.2 fails for endpoints. Workaround: See the Knowledge Base article for details.
988624	KB84044			Issue: Application Control inventory generation can take longer than 24 hours to resume after reaching the throttling threshold limit. Workaround: See the Knowledge Base article for details.
1026279	KB84045			Issue: Another rule is needed to run Perl with Application Control. Workaround: See the Knowledge Base article for details.
1017933	KB84046			Issue: You're unable to apply an Application Control policy with a trusted path that contains an environment variable. Workaround: See the Knowledge Base article for details.
1045414				Issue: In the system Event Viewer logs, a "Microsoft-Windows-Kernel-General" error message is logged while writing to the registry during start.
1079808				Issue: The Solidifier service fails to start with the app-verifier "low resource" option selected.
1074569				Issue: The Solidifier service fails to start in Disable mode when an inventory sync from scinvlog.bak to scinv occurs and you restart the system.
1079819				Issue: File creation fails for long file name execution.
1111630				Issue: Application Control isn't receiving reputation updates from the TIE server.
1088137				Issue: The wrong parent process information displays for binary addition activity on the Policy Discovery page.
1115590				Issue: Serial numbers are displayed as encoded on the TIE Reputation page.
1115107				Issue: You get an observation for Scanalyzer.exe even if there's an Advance Exclusion Filter (AEF) rule to suppress observations from that path.
1112186				Issue: Application Control 7.0.0 supports the proxy without authentication for the GTI feature on endpoints. If the proxy is set without authentication, you can use commands in the netsh winhttp context to configure proxy and tracing settings for Windows HTTP. You can run the netsh commands for winhttp manually at the netsh prompt or in scripts and batch files.
1049573	KB85156	All versions		Issue: System slows or stops responding while accessing files over the network.
	KB85696	7.0.0	Won't fix	Issue: Binary is signed by a certificate, but an 'Allow by Certificate' rule can't be created.
	KB86846	7.0.0		Issue: ERROR: fshooks.c : 687: Could not validate filename OR filename is invalid: (DFS replication fails with ACC installed).
	KB86847	7.0.0		Issue: Installation of plan fails. FatalIOException: Unable to create file (vSphere* fails to load when Application Control is installed).
	KB87257	7.0.0	Won't fix	Issue: Installer Detection bypass option is Deprecated for endpoints running version 6.1.1 and later (Package Control in relation to the architecture rules for the attr -i command).
		7.0.0	7.0.1 HF4 and 8.0	Issue: Microsoft Windows Update can't be installed when ACC is configured in Enable, Observe, or Update mode.
	KB88091	6.x and 7.x		Issue: Application Control causes a Windows error event to occur when a new USB disk is connected to a solidified client.
	KB88092	7.0	Won't fix	Issue: The default TIE Server configuration can affect sample submission for some endpoint clients.

Windows 8:

Reference Number	Related Article	Found in Version	Resolved in Version	Description
959413				Issue: You're unable to install an MSI-based package on x86 in Update or Enable mode.
946092				Issue: sadmin commands can become unresponsive on Windows Embedded 8 64-bit platforms with the vsepflt driver.

Windows 2008 R2 (64-bit)

Reference Number	Related Article	Found in Version	Resolved in Version	Description
608636				Issue: During manual installation of Solidcore Agent on the Windows 2008 R2 (64-bit) platform, you see that Windows installer encounters a validation error for the msiexec.exe and kernelbase.dll files. Workaround: Click Ignore once or Ignore always on the error pop-up to continue installation.

Windows 2008 (64-bit)

Reference Number	Related Article	Found in Version	Resolved in Version	Description
609780				Issue: On the Windows 2008 (64-bit) platform, the rundll32.exe file crashes if an application is uninstalled by using Add/Remove Programs and initially the SetupInstallFromInfSection() function is used to install the application.

Windows 2008/Vista (32-bit and 64-bit), Windows XP/Windows 7/Windows 2008 R2 (64-bit)

Reference Number	Related Article	Found in Version	Resolved in Version	Description
609757				Issue: In Enable mode, if you try to access a folder with unsolidified files through File Explorer, deny-exec events are raised for the files in the folder.

Windows Vista

Reference Number	Related Article	Found in Version	Resolved in Version	Description
607541				Issue: For Windows Vista and later platforms, the Solidcore Agent configuration marks a service called Windows Modules Installer (TrustedInstaller.exe) as an Updater. This action is performed to allow Windows Update to work properly. This service can both install and remove Windows components even if the pkg-ctrl feature is enabled.

Windows 10

Reference Number	Related Article	Found in Version	Resolved in Version	Description
1188255	KB91257	7.0.0	8.2.1 Update 3 8.0.2 Update 1	Issue: ACC prevents the Windows Defender Update process from running successfully. Resolution: Apply the correct update for your version of Application Control: Application Control 8.2.1 Update 3 Application Control 8.0.2 Update 1 See KB91257 - Application Control and Change Control driver issues (Windows Update) for further guidance.

Affected Products

Application and Change Control 7.0.x (EOL)
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro

Knowledge Center

Application Control 7.x.x Known Issues

Environment

Summary

Affected Products

Languages:

Title

Title

Knowledge Center

Application Control 7.x.x Known Issues

Environment

Summary

Affected Products

Languages:

Choose your region

Title

Title