I'm working in an enterprise where we have to actively roll back McAfee Endpoint Security 10.1 to Virusscan 8.8 and related components. This question is about the Access Protection component that goes with Virusscan 8.8.
There is apparently no way, by command, to disable Access Protection if managed systems stop talking to the EPO server. So in order to avoid crippling workstations, we had to remove the Access Protection component temporarily. The removal command is
SETUPVSE.EXE REMOVE=AccessProtection
NOW I want to re-deploy the Access Protection back on to systems (after updating the Agent) and I need to test first if the Access Protection is still installed or was removed. Again the systems aren't talking to EPO so I can't push anything to them; all actions have to be on the individual workstation. No problem re-installing Access Protection with "ADDLOCAL" instead of "REMOVE" as shown above, just I should test first if re-install is needed.
SO, I want to programmatically test if Access Protection is already installed, or removed as above, on the systems before I try to re-install it. I'm simply trying to find a way to determine whether AP is was removed or not.
I am looking for a file presence, file version, registry key, content of configuration file, or other method that does not require going to the Virusscan Console (GUI) on each individual system ... that indicates that Access Protection is on the system. Intel has been unable to define any method to do this.
That's all I need: some way to programmatically determine if Access Protection is installed or not. Using the Console GUI, the list will not show a component if it's been removed, so surely that information must exist in some form on the system.
I have already done the usual intensive research -- and even opened an SR with Intel -- and haven't found anything useful for this purpose.
برچسب:
نویسنده: استخدام کار