On one of my servers, i get the following error in the mcAfee logs:
18-02-2013 09:03:25 Blocked by Access Protection rule NT AUTHORITY\SYSTEM C:\Program Files\System Center Operations Manager\Agent\HealthService.exe C:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe Common
Standard Protection:Prevent termination of McAfee processes Action blocked : Terminate
18-02-2013 09:03:25 Blocked by Access Protection rule NT AUTHORITY\SYSTEM C:\Program Files\System Center Operations Manager\Agent\HealthService.exe C:\Program Files (x86)\McAfee\VirusScan Enterprise\VsTskMgr.exe Common Standard
Protection:Prevent termination of McAfee processes Action blocked : Terminate
18-02-2013 09:03:25 Blocked by Access Protection rule NT AUTHORITY\SYSTEM C:\Program Files\System Center Operations Manager\Agent\HealthService.exe C:\Windows\system32\mfevtps.exe Common Standard Protection:Prevent termination
of McAfee processes Action blocked : Terminate
18-02-2013 09:03:25 Blocked by Access Protection rule NT AUTHORITY\SYSTEM C:\Program Files\System Center Operations Manager\Agent\HealthService.exe C:\Program Files (x86)\McAfee\VirusScan Enterprise\mfeann.exe Common Standard
Protection:Prevent termination of McAfee processes Action blocked : Terminate
18-02-2013 09:03:25 Blocked by Access Protection rule NT AUTHORITY\SYSTEM C:\Program Files\System Center Operations Manager\Agent\HealthService.exe C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe Common Standard Protection:Prevent
termination of McAfee processes Action blocked : Terminate
18-02-2013 09:03:25 Blocked by Access Protection rule NT AUTHORITY\SYSTEM C:\Program Files\System Center Operations Manager\Agent\HealthService.exe C:\Program Files (x86)\McAfee\Common Framework\naPrdMgr.exe Common Standard Protection:Prevent
termination of McAfee processes Action blocked : Terminate
18-02-2013 09:03:25 Blocked by Access Protection rule NT AUTHORITY\SYSTEM C:\Program Files\System Center Operations Manager\Agent\HealthService.exe C:\Program Files (x86)\McAfee\VirusScan Enterprise\shstat.exe Common Standard
Protection:Prevent termination of McAfee processes Action blocked : Terminate
I don't see why healthservice, should try and terminate McAfee services, this is normally not a problem. All of my 170 servers are running McAfee and SCOM 2012, without any problems.
Anyone know why this is happening?