Knowledge Center

How to view the process load order for Endpoint Security and other installed McAfee products
Technical Articles ID:   KB89077
Last Modified:  4/10/2017


McAfee Endpoint Security (ENS) 10.x


Perform the following steps to determine the load order for processes associated with ENS and any other McAfee products installed in your environment.
  1. Download Microsoft Process Monitor from https://technet.microsoft.com/en-us/library/bb896645.aspx.
  2. Run Process Monitor.
  3. Click Options, Enable Boot Logging.
  4. Click OK on the pop-up window. The next time a reboot occurs, a boot capture is created.
  5. Reboot the system.
  6. Run Process Monitor.
  7. Click File, Save and save the boot capture using the native PML format.
  8. Open the saved PML boot capture.
  9. Click Filter, Filter and choose the following conditions:
    • Operation = Process Create
    • Operation = Process Start
    • Operation = Process Exit
This shows you when all of the McAfee processes (and others) start, what the parent process is, and whether the process stays running or terminates.

Rate this document


This article is available in the following languages:

English United States
Spanish Spain

Glossary of Technical Terms

 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.