Windows Update DLL files will not load properly until Application Control (Standalone) is placed in an enabled state.

Technical Articles ID: KB89459
Last Modified: 9/24/2019

Environment

McAfee Application and Change Control (MACC) 7.0.1.402

Summary

Problem

One of four Windows Update DLL files does not load properly until Application Control (Standalone) is placed in an enabled state.

NOTE: The clients that are managed by ePolicy Orchestrator (ePO) are not affected by this issue. The reason is because the needed DLL files for Windows Update are already present within the McAfee Default Policy.

Cause

The Windows Update DLL files listed below are needed for the Windows Update process to function correctly on a client with Application Control (Standalone) installed. They are:

wuauserv.dll
wuaueng.dll
wups.dll
dosvc.dll

During the installation of Application Control (Standalone), only the first three DLL files in the list are recognized as existing within the environment and are added to the Scanalyzer checklist. When Application Control (Standalone) is placed in an enabled state and Scanalyzer runs, the dosvc.dll file is found and added to the checklist. The dosvc.dll file is needed for the Windows Update process to function properly.

Solution

This issue has been corrected with the release of MACC 7.0.1.413.

McAfee product software, upgrades, maintenance releases, and documentation are available from the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.

Workaround

If Application Control (Standalone) is not installed:

Install Application Control (Standalone).
Add the Application Control license.
Run Scanalyzer.bat.

If Application Control (Standalone) is already installed:

Start the Solidifier command line interface (CLI).
Place Application Control (Standalone) in Recover mode. Type the following command and press Enter:

sadmin recover
Type the following command and press Enter:

sadmin config set WindowsUpdateDlls=wuauserv.dll;wuaueng.dll;wups.dll;dosvc.dll

To validate that all the needed Windows Update DLL files are accounted for, verify the Application Control (Standalone) configuration by running the following command:

sadmin config show -d | findstr 'WindowsUpdateDlls

The expected results from running the command are:

C:\Windows\system32>sadmin config show -d | findstr WindowsUpdateDlls
WindowsUpdateDlls wuauserv.dll;wuaueng.dll;wups.dll;dosvc.dll

Affected Products

Application and Change Control 7.0.x

Languages:

This article is available in the following languages:

English United States
Japanese

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Windows Update DLL files will not load properly until Application Control (Standalone) is placed in an enabled state.

Environment

Summary

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Featured Solutions

Explore Our Portfolio

Security Outcomes

Industries

Products

Featured Solutions

Explore Our Portfolio

MVISION Products

Services & Training

Threat Research

Our Researchers

Threat Landscape Dashboard

Tools

Contact Us

Resources

Downloads

Product Help

Connect with Us

Explore

Our Company

Our Efforts

Other Resources

Careers

Partnerships

Windows Update DLL files will not load properly until Application Control (Standalone) is placed in an enabled state.

Environment

Summary

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title