Windows Update DLL files will not load properly until Application Control (Standalone) is placed in an enabled state.

Technical Articles ID: KB89459
Last Modified: 9/24/2019

Environment

McAfee Application and Change Control (MACC) 7.0.1.402

Summary

Problem

One of four Windows Update DLL files does not load properly until Application Control (Standalone) is placed in an enabled state.

NOTE: The clients that are managed by ePolicy Orchestrator (ePO) are not affected by this issue. The reason is because the needed DLL files for Windows Update are already present within the McAfee Default Policy.

Cause

The Windows Update DLL files listed below are needed for the Windows Update process to function correctly on a client with Application Control (Standalone) installed. They are:

wuauserv.dll
wuaueng.dll
wups.dll
dosvc.dll

During the installation of Application Control (Standalone), only the first three DLL files in the list are recognized as existing within the environment and are added to the Scanalyzer checklist. When Application Control (Standalone) is placed in an enabled state and Scanalyzer runs, the dosvc.dll file is found and added to the checklist. The dosvc.dll file is needed for the Windows Update process to function properly.

Solution

This issue has been corrected with the release of MACC 7.0.1.413.

McAfee product software, upgrades, maintenance releases, and documentation are available from the Product Downloads site at: https://www.mcafee.com/enterprise/en-us/downloads/my-products.html.

NOTE: You need a valid Grant Number for access. See KB56057 - How to download Enterprise product updates and documentation for more information about the Product Downloads site, and alternate locations for some products.

Workaround

If Application Control (Standalone) is not installed:

Install Application Control (Standalone).
Add the Application Control license.
Run Scanalyzer.bat.

If Application Control (Standalone) is already installed:

Start the Solidifier command line interface (CLI).
Place Application Control (Standalone) in Recover mode. Type the following command and press Enter:

sadmin recover
Type the following command and press Enter:

sadmin config set WindowsUpdateDlls=wuauserv.dll;wuaueng.dll;wups.dll;dosvc.dll

To validate that all the needed Windows Update DLL files are accounted for, verify the Application Control (Standalone) configuration by running the following command:

sadmin config show -d | findstr 'WindowsUpdateDlls

The expected results from running the command are:

C:\Windows\system32>sadmin config show -d | findstr WindowsUpdateDlls
WindowsUpdateDlls wuauserv.dll;wuaueng.dll;wups.dll;dosvc.dll

Affected Products

Application and Change Control 7.0.x

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Knowledge Center

Windows Update DLL files will not load properly until Application Control (Standalone) is placed in an enabled state.

Environment

Summary

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Knowledge Center

Windows Update DLL files will not load properly until Application Control (Standalone) is placed in an enabled state.

Environment

Summary

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title