Write denied event generated when you right-click a solidified file

Technical Articles ID: KB94615
Last Modified: 6/23/2021

Environment

McAfee Application and Change Control (MACC) 8.x, 7.x, 6.x

Problem

A Write Denied event is generated when you right-click a solidified file.

NOTE: MACC doesn’t block anything, but only generates a Write Denied event.

Example:

solidcore.log:
U.2644.3264: ERROR: evt.c : 1269: McAfee Solidifier prevented an attempt to modify file 'C:\Program Files (x86)\Google\Update\GoogleUpdate.exe' by process/script C:\Windows\explorer.exe (sha1: 4ada3c60c3a3699057d6b4265400aedd4c2e5eac, md5: f5883f210af1795c1868ae570fcb7185, sha256: c3159f629b9e989ee354834aa5a6a9af146b8bd1c07204e6ed9e94c96f2509fb) (Process Id: 7044, User: .\Administrator).

s3diag.log:
<WRITE_DENIED file_name="C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" pid="7044" process_name="c:\windows\explorer.exe" ppid="1836" parent_process_name="c:\windows\system32\svchost.exe" event_time="1622128598996" event_time_system="May 27 2021:15:16:38" is_system_file="false" deny_reason="File-solidified" user_name="local\administrator" />

Cause

The above behavior occurs because of how Windows explorer.exe requests a read, or execute access to the file.

Solution

This behavior is expected. Any attempt to fix this issue, can cause MACC to bypass other logging events, which it generates to monitor or track any type of change.
For example, change in ownership.

Affected Products

Application and Change Control 8.3.x
Application and Change Control 8.2.x
Application and Change Control 8.1.x
Application and Change Control 8.0.x
Application and Change Control 7.0.x (EOL)
Application and Change Control 6.5.x
Application and Change Control 6.4.x
Application and Change Control 6.3.x
Application and Change Control 6.2.x
Application and Change Control 6.1 (EOL)
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Portuguese Brasileiro

Knowledge Center

Write denied event generated when you right-click a solidified file

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Write denied event generated when you right-click a solidified file

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title