Write denied event generated when you right-click a solidified file

Artículos técnicos ID: KB94615
Última modificación: 6/23/2021

Entorno

McAfee Application and Change Control (MACC) 8.x, 7.x, 6.x

Problema

A Write Denied event is generated when you right-click a solidified file.

NOTE: MACC doesn’t block anything, but only generates a Write Denied event.

Example:

solidcore.log:
U.2644.3264: ERROR: evt.c : 1269: McAfee Solidifier prevented an attempt to modify file 'C:\Program Files (x86)\Google\Update\GoogleUpdate.exe' by process/script C:\Windows\explorer.exe (sha1: 4ada3c60c3a3699057d6b4265400aedd4c2e5eac, md5: f5883f210af1795c1868ae570fcb7185, sha256: c3159f629b9e989ee354834aa5a6a9af146b8bd1c07204e6ed9e94c96f2509fb) (Process Id: 7044, User: .\Administrator).

s3diag.log:
<WRITE_DENIED file_name="C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" pid="7044" process_name="c:\windows\explorer.exe" ppid="1836" parent_process_name="c:\windows\system32\svchost.exe" event_time="1622128598996" event_time_system="May 27 2021:15:16:38" is_system_file="false" deny_reason="File-solidified" user_name="local\administrator" />

Motivo

The above behavior occurs because of how Windows explorer.exe requests a read, or execute access to the file.

Solución

This behavior is expected. Any attempt to fix this issue, can cause MACC to bypass other logging events, which it generates to monitor or track any type of change.
For example, change in ownership.

Productos implicados

Application and Change Control 8.3.x
Application and Change Control 8.2.x
Application and Change Control 8.1.x
Application and Change Control 8.0.x
Application and Change Control 7.0.x
Application and Change Control 6.5.x
Application and Change Control 6.4.x
Application and Change Control 6.3.x
Application and Change Control 6.2.x
Application and Change Control 6.1
Known Issue/Product Defect

Idiomas:

Este artículo se encuentra disponible en los siguientes idiomas:

English United States
Spanish Spain
French
Italian
Portuguese Brasileiro

Glosario de términos técnicos

Resaltar los términos del glosario

Tómese un momento para consultar nuestro Glosario de términos técnicos.

Knowledge Center

Write denied event generated when you right-click a solidified file

Entorno

Problema

Motivo

Solución

Productos implicados

Idiomas:

Glosario de términos técnicos

Title

Title

Knowledge Center

Write denied event generated when you right-click a solidified file

Entorno

Problema

Motivo

Solución

Productos implicados

Idiomas:

Glosario de términos técnicos

Elija su región

Title

Title