Application and Change Control 8.x Known Issues (Windows)

Technical Articles ID: KB87839
Last Modified: 2024-05-06 06:36:26 Etc/GMT

Environment

Application and Change Control (ACC) 8.x (Windows)

Summary

Recent updates to this article

Date	Update
May 6, 2024	Removed build number 8.4.0-331 details from the MACC-13196 issue description.
April 30, 2024	Added MACC-13196 to the "Non-critical Application Control known issues" section.
April 29, 2024	Merged MACC-11129 and TSDE-12620 issue information in the "Non-critical Application Control known issues" section.
April 15, 2024	Added TSDE-15336 to the "Non-critical Application Control known issues" section.
April 3, 2024	Added TSDE-11953 to the "Non-critical Application Control known issues" section.

To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.

NOTE: Known issues listed for previous builds still exist in newer builds, unless identified in this article as fixed.

Contents:
Click to expand the section you want to view:

Product release information

For details of product release information, see KB87944 - Supported platforms for Application and Change Control.

Critical Application Control known issues

Client Issues
Reference	Related Article	Found In	Fixed In	Description
MACC-11471	-	8.3.7	8.4.0	Issue: On systems with the ENS 10.7 April 2023 Update and ACC 8.3.7 client builds, ACC Inventory mode causes the system to hang during a shutdown attempt. Workaround: Boot to Safe Mode and change the RTEMODE and RTEMODEONREBOOT registry values to a mode other than Inventory mode. For more details about registry values, see KB90755 - Minimum data collection to troubleshoot Application and Change Control.
MACC-11165	-	8.3.5	-	Issue: On x86 systems with Driver Verifier enabled, there's an intermittent crash after solidification. Workaround: Don't enable Driver Verifier on x86 systems.

Non-critical Application Control known issues

Contents

Client Issues - Under Investigation
Client Issues - Resolved
Client Issues - Won't Fix
Client Issues - Expected Behavior

Client Issues - Under Investigation

Reference

Found
In

Fixed
In

Description

MACC-13196

8.3.7

Issue: After an install of Solidcore, you observe that the USB and SSD devices are accessible even though the policy is set to block.

Workaround:

Steps to Consider	Remarks / Implication
sadmin config set CheckCertTrustWithVTP=0 sadmin attr add -u usbstor.sys sadmin attr add -u uaspstor.sys sadmin unso <path>\usbstor.sys sadmin unso <path>\uaspstor.sys NOTE: All the system32 files with the ban rule should have a corresponding unso command running for the files.	When CertcheckwithVTP is disabled: In enable mode, upgrades of MS-signed binaries will be supported only with updaters. In update mode, Windows updates or upgrades of any MS-signed binaries will be fully supported.

MACC-11129
TSDE-12620

8.3.4

Issue: When you enable MP-CASP on systems with 11th and 12th generation Intel Core processors and reboot the system, it goes into an automatic repair loop, stops at the Vendor logo, or generates a BSOD.

Workaround #1: Add rules to perform a CASP bypass for the processes below:

sadmin attr add -c svchost.exe
sadmin attr add -c lsass.exe
sadmin attr add -c winlogon.exe
sadmin attr add -c scsrvc.exe (this is a Solidcore process)

OR

Workaround #2: Disable MP-CASP via ePO policy or local CLI command.
NOTE: Reboot for feature changes to take effect

Navigate to ePO policy under Application Control Options (Windows) -> Features -> Enforce feature control from Trellix ePO -> Memory Protection -> CASP
or
Enter the following: sadmin features disable mp-casp

TSDE-11953

8.2.6

Issue: Modification to a solidified directory is possible after ending update mode.

Workaround: As inventory synchronization doesn't happen when the user exits update mode, the user must manually run the sadmin ls command to enforce inventory merge:

Start update mode.
Perform required changes on the client.
End update mode.
Execute command sadmin ls to merge the inventory changes being performed in update mode.

MACC-10283

8.2.1

8.3.4

Issue: Creating an "Image File Execution Options" key for the Application Control service prevents scsrvc.exe from being executed.

Description: Microsoft Windows allows users to specify a debugger image to run instead of a given application. You can specify a debugger image by setting a key into the Windows registry at the following location:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion.
Setting the key for scscrvc.exe can prevent the service from being executed.

Solution: As part of the product integrity feature, Application Control protects this registry path from write operations.

MACC-11334

8.3.5

Issue: Unable to install or update Solidcore agent due to the presence of temp files.

Workaround:

Open the Task Manager.
Check if the process "unzip.exe" is running, and stop the process.
Start Update Mode.
Delete the temp directory C:\Windows\TEMP\{432DB9E4-6388-432F-9ADB-61E8782F4593} if it exists.
Try to reinstall or perform the upgrade again.
End Update Mode.

MACC-11363

8.3.5

Issue: Installation/Upgrade failure of Trellix Agent (TA) (Framepkg.exe).

MACC-11193

8.3.5

Issue: A Self-approval pop-up keeps displaying when trying to execute any MSI from a network share, and when the action taken by the user is DENY.

Workaround: Wait for 30 minutes. The Self-approval pop-up stops displaying.

MACC-8938

8.3.0

Issue: Buffer Overflow with Threat Intelligence Exchange/Global Threat Intelligence (TIE/GTI) causes the scsrvc service to crash.

Workaround: Disable TIE/GTI reputation.

MACC-10318

8.3.2

Issue: Windows version 20H2 installation fails when the Application Control is in Enable Mode.

Workaround: From the ePolicy Orchestrator (ePO) or client, add the updater rule and then install Windows.

sadmin updaters add -p services.exe "\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe"

MACC-10313

8.3.2

Issue: When ACC is upgraded from version 8.0.2 to 8.3.x and rebooted, the client upgrade status remains as reboot needed.

MACC-10311

KB93605

8.3.2

Issue: In rare cases, the installation of binaries stops for an indefinite period when Package Control and the antivirus service are enabled on the system.

Workaround:
From the ePO or client, configure the passthrough process for antivirus service in Solidcore.
Example: In Windows Defender, add the rule:

sadmin attr add -p MsMpEng.exe

After the passthrough process for antivirus is configured, reboot and run the installer again.

MACC-10327

8.3.2

Issue: Incorrect offset calculation can sometimes lead to a bug check on Windows 8.1 and Windows 10 x86 systems.

MACC-10295

8.3.2

Issue: When a client enable task is triggered from ePO, the Solidcore client doesn't receive the enable task from MA and sometimes the command line interface also stops.

Workaround: From the ePO or on the client, set the "MaplErrorHandlerEnabled=0" configuration, and restart the enable task.

MACC-10051

8.2.1

Issue: Unable to create FILE_ATTR_MODIFIED/FILE_ATTR_MODIFIED_UPDATE events even when the registry value is set to 0 for FileAttrCTrack.

MACC-9939

8.3.1

Issue: One of the Solidcore.log files is displayed as soli.log in the %programdata%/McAfee/Solidcore path.

MACC-10041

8.3.1

Issue: When you try to move the bat script file from a removable or unremovable drive that has skiplist -v applied, on the first attempt, you see the message:

Access Denied.

Workaround: The second attempt allows moving of the bat script.

MACC-9920

7.0.x

Issue: Performance issues (high CPU or memory) are seen with Reputation enabled on 7.0 and later in Observe mode.

Cause: Frequent inventory merges that cause high CPU utilization.

Workaround: Disable reputation or go to update/enabled mode.

TSDE-5590

8.2.6

Issue: Can't insert duplicate key in object 'dbo.SCOR_APPLICATIONS' due to violation of UNIQUE KEY constraint 'SCOR_UNIQUE_CHKSUM'. The duplicate key value is (<NULL>).

Cause: This issue occurs when you try to import rule groups having multiple installers with the same AppName and version. If there are multiple installers with different chksum values that have the same appName and version, and if there's more than one such appName, you see this error.

Example:
In the following scenario, there's a bug in the parsing rulegroup xml for installers:

1st App: appName1, version1
   installer1: cksum_value1
   installer2: cksum_value2
And so on....

2nd App: appName2, version2
   installer1: cksum_value3
   installer2: cksum_value4
And so on....

And so on for different appNames

Workaround: Don't have multiple installers with the same appName and version in the rulegroup xml.

TSDE-4988

8.2.1

Issue: Some files are denied execution in the Observe mode. Some files are unsolidified and denied execution.

MACC-9083

8.2.1

Issue: Delay in website from ASP.net (IIS) on clients with Application control enabled.

Workaround: Run the command: sadmin skiplist add -b "c:\Windows\assembly\GAC_32\System.Web\
2.0.0.0__b03f5f7f11d50a3a\System.Web.dll"

NOTE: The above command must be in a single line.

MACC-8897

8.2.1

Issue: The Observe mode isn't pulling inventory because of a deny action by the Reputation block.

Workaround: Disable Reputation (GTI/TIE).

MA-6278
MACC-8897

8.2.1

Issue: The Scsrvc.exe constantly crashes because of a Msgbus.dll issue.

TSDE-5022

8.1

Issue: Process marked as updaters doesn't get updater permissions. This issue affects all SysCore versions. You see the following log error:

ERROR: cap_kern.c : 1786: Failed to compute checksum for '<file>'. err = 1002

Workaround: Run the command Sadmin config set CksumCalcMode=0 and then reboot or relaunch the process.

TSDE-4217

8.2.1

Issue: The MPCompat Key value is overwritten to the default value (1) during the upgrade.

NOTE: This issue occurs in all versions except the Solidcore Client version 7.0.2.

Workaround: Reconfigure the parameter using:
sadmin config set MPCompat="value"

MACC-8759

8.2.1

Issue: The SoIsTidOptimizationEnabled Key value is overwritten to the default value (1) during the upgrade.

NOTE: This issue occurs when an earlier Solidcore Client version is upgraded from 8.0.0.855 to 8.0.0.875 or later.

Workaround: Reconfigure the parameter using:
sadmin config set SoPriority="value"

MACC-8759

8.2.1

Issue: The SoPriority Key value is overwritten to the default value (1) during the upgrade.

NOTE: This issue occurs when an earlier Solidcore Client version is upgraded to 8.2.1.114 or later.

Workaround: Reconfigure the parameter using:
sadmin config set SoPriority="value"

MACC-8746

8.3.0

Issue: There's an incorrect copyright string for the Extension build 8.3.0.225.

MACC-8891

8.3.0

Issue: After the Solidcore standalone installer (InstallShield) is run, the End User License Agreement (EULA) page in the InstallShield wizard displays "EULA (April 2017)."

MACC-8574

8.3.0

Issue: In Inventory mode, the "SC Begin Update mode" and "SC Observe mode" ePO client tasks, when executed, take some time to complete. The reason is because the inventory reconciliation is automatically executed in advance. The time taken is based on the number of files with mismatches, such as checksum and types.

Recommendation: Check whether the task "begin update" or "observe" is completed before the reboot.

MACC-8694

8.2.6

Issue: Write denied events are seen for .js files after the Windows upgrade.

MACC-9053

8.2.6

Issue: Copyright version for ACC binaries is displayed as 2019.

MACC-8756

8.2.1

Issue: The Following value is getting overwritten to default value 1 during the upgrade:

NOTE: The issue occurs in the following upgrade cases.

8.2.1 Update 3 to Update 4
8.2.1 Update 3 to Update 5
8.2.1 Update 4 to Update 5

Workaround: Reconfigure the parameter using:
sadmin config set RemoteFileModificationBypassConfig=0

MACC-8419

8.2.1

Issue: System crash with bug check C2.

MACC-7386

8.2.1

Issue: Renaming of Folder containing Solidcore files isn't blocked.

MACC-7222

8.2.1

Issue: Change tracking event isn't generated when shared folders are modified on a remote system.

8.2.1

Issue: ACC doesn't detect changes made from a remote system to a file in a shared directory. As a result, content change tracking events aren't generated.

1256220

8.2.1

Issue: The Solidcore installation folder isn't removed after an Uninstall Task.

1257589

8.2.1

Issue: Deploying Application Control via the ePO Product Deployment workflow doesn't report back the installation status. Even though the installation status reporting is impacted, installation of the product can complete normally.

1266718

8.2.1

Issue: Blue screen (kmode exception not handled) is seen after you reboot a system on Windows.

Workaround: After you install ACC and before you do a partial enable, if you've installed a VSCore version older than 18.12, reboot the system. Then, perform the partial enable.

1266827

8.2.1

Issue: BSOD - DRIVER_UNLOADED_WITHOUT_
CANCELLING_PENDING_OPERATIONS - After execute enable full, disable, and enable limited.

Workaround: Send SC: Run commands: task with sadmin clean C:. Then, send task enable with limited activation. Do the same if it's a standalone.

1259000

KB91225

8.2.0

Issue: A system crash without the blue screen or a CLI crash occurs on Windows 10 or Server 2016 systems after you place ACC in modes other than Disabled.

1259343

8.1.1

Issue: Windows servers 2003 SP2 becomes unresponsive when MAC is installed.

1225038

8.1.0

Issue: Repeated rows per system and requests made on the Policy Discovery page.

1231217

8.1.0

Issue: Incorrect labels in the Approval status drop-down list on the Policy Discovery page.

1231583

8.1.0

Issue: 'User Comments' repeated for Observations with Global Prevalence greater than 1 on the Policy Discovery page.

1237773

8.1.0

Issue: Client task for enabling ACC from ePO fails (the second line in the progress bar becomes red).

Workaround: Using the CLI on the client to be solidified, run the command instaconfig /connect as administrator. After you run the command, run the ACC enable task from ePO again. A restart isn't needed.

1210913

8.1.0

Issue: SolidCore CASP Code Injection can be bypassed when an address is tagged as RX before calling kernel32.dll.

219284

8.1.0

Issue: Write-protected files can be deleted from the command line when their name exceeds a certain length (DOS short name associated).

1221213

8.1.0

Issue: Executable files (.exe) in network drives aren't allowed to be executed when they are in trusted folders.

1223577

8.1.0

Issue: The swin1.sys file isn't deleted after ACC is set as Enable.

1230980

8.1.0

Issue: An incorrect error message is displayed when you upgrade ACC on an x64 Windows 10 system with an x86 installer.

1272591

KB79201

8.0.0

Issue: For JAR files, the Java interpreter can run a JAR file from any extension. Renaming a valid JAR file to a file with a different extension still allows it to be executed.

Workaround: See the related article for details.

1168664

8.0.0

Issue: Execution control rules are removed and reapplied when a policy update is received from ePO.

1170115

8.0.0

Issue: Under certain circumstances, the Missed or Change reputation notification isn't received on endpoints.

1156303

8.0.0

Issue: Write or Read denied events not raised while changing a write or read-protected file using bash.

1191934

8.0.0

Issue: ActiveX feature with Webex plug-in causes the TIE database to fill with multiple attempts to resolve _Eatgpc.dll.

1161191

8.0.0

Issue: [Windows 8] The block interpreter behaves differently between Windows 7 and Windows 8 and later, when a rule is added after the interpreter is started.

Behavior on Windows 7 platform:
Already started interpreter is terminated.
Behavior on Windows 8 and later:
Already started interpreter isn't terminated.

MACC-8708

7.0

Issue: Solidcore policies can't be duplicated using the Policy Details page because the OK button is disabled.

NOTE: This issue occurs in ACC 7.0 and later.

Workaround: Use the Policy Catalog page to duplicate policies.

MACC-5925

7.0

Issue: Skiplist -s rule with wildcard * unsolidifies files in subfolders.

1273074
1274763

KB91569

7.0

Issue: Updater rights and permissions unexpectedly granted to svchost.exe.

Workaround: See the related article for details.

Back to Contents

Client Issues - Resolved

Reference

Found
In

Fixed
In

Description

Fixed ACC 8.3.4 Client

MACC-11491

8.3.4

8.3.6 Hotfix 1

Solution: As metadata submission is disabled in the client by default, ACC controls the metadata submission to TIE, thereby preventing excessive traffic flow to the TIE server.

MACC-10930

8.3.3

8.3.4

Issue: SCCM updates are blocked.

Solution: The default rules now allow SCCM updates without any fail after adding SCCM client rules to the directory.

MACC-10776

8.3.3

8.3.4

Workaround: The solidification status window doesn't hang when you execute the command sadmin config set MaplCommLostRestart=0 and start solidification with sadmin while running the Solidcore with Update Mode enabled.

MACC-10886

8.3.3

8.3.4

Issue: When you enable Observe or Update mode, and reboot the system, it goes into a repair state, and the system must be rebuilt.

Solution: A System Crash screen (blue screen) doesn't appear on the system when you run Solidcore with Observe Mode or Update Mode enabled. It works successfully on the next reboot of the system.

MACC-10684

8.3.3

8.3.4

Workaround: The VTP_Trusted error message is fixed and is no longer displayed.

MACC-10504

8.3.2

8.3.4

Issue: During the first reboot after a product upgrade, the system remains in an endless logon screen.

MACC-10663

8.3.2

8.3.4

Issue: A blank blue screen appears when Solidcore is enabled with Inventory Mode and Observe Mode.

Workaround: When you enable Solidcore with both the Inventory Mode and Observe Mode, a blue screen error doesn't appear on the system.

MACC-10796

8.3.0

8.3.4

Workaround: The finetune.bat entry issue with the correct DLL name on the operating system is resolved.

MACC-10653

8.3.3

8.3.4

Issue: A massive influx of new file write denied events is noticed as a result of Windows 10 upgrade.

Workaround: ACC now allows automatic clean-up of the previous version of the windows after adding C:\windows.old to the default windows updater group.

MACC-10013

8.2.1

8.3.4

Issue: When you try to execute binaries by adding a trusted rule in a network shared path, the .exe file isn’t executed.

Workaround: The issue is resolved. All binary files including the .exe file can be executed.

Fixed ACC 8.3.3 Client

MACC-10396

8.3.3

Issue: The Application ExternDLLTestForm.exe loads when the DLL is removed from Solidcore whitelisting.

MACC-10554

8.3.0

8.3.3

Issue: CMD files aren't solidified in Enable mode when copied through file sharing (c$ via a trusted user.

MACC-10578

8.3.2

8.3.3

Issue: Solidcore blocks multiple applications when CrowdStrike is present.

MACC-10542

8.3.0

8.3.3

Issue: You can't delete temporary files when the Script-auth option is enabled.

MACC-9937

8.3.0

8.3.3

Issue: Windows 2008 R2 server crash. System crash (blue screen) details: Bugcheck 135.

MACC-10373

8.2.6

8.3.3

Issue: The install can take up to over an hour to complete the installation.

MACC-10366

8.3.0

8.3.3

Issue: Execution-Control blocking issue:

ERROR: evt.c : 1269: McAfee Solidifier blocked launch of 'c:\windows\system32\cmd.exe

MACC-10051

8.3.0

8.3.3

Issue: Unable to create events for: FILE_ATTR_MODIFIED/FILE_ATTR_MODIFIED_UPDATE

MACC-7607

8.2.1

8.3.3

Issue: ACC doesn't deny the execution of native Image files during a Silverlight installation.

MACC-10410

8.3.0

8.3.3

Issue: A slow small memory leak issue is seen over several months.

MACC-10087

8.2.1

8.3.3

Issue: Unable to enable memory protection (MP), and Script as Updater (SAU) when access Control is enabled.

MACC-10278

8.2.1

8.3.3

Issue: Default group ''SCCM/SMS Client' adds several trusted directories that aren't needed.

MACC-9256

8.3.0

8.3.3

Issue: After installation, Windows becomes unresponsive during a system start. The issue is seen on Windows 7 and later operating systems.

Workaround: After an ACC install but before a system restart, type the following in a command prompt:

set "sadmin config set ServiceStartFinetune=7"

MACC-10368

8.3.0

8.3.3

Issue: System crash (blue screen) Bugcheck 9F occurs when you shut down Windows.

MACC-10399

8.3.2

8.3.3

Issue: System crash (blue screen) on (X64) Systems when you run a test with driver verifier.

Fixed ACC 8.3.2 Client

MACC-10366

8.3.1.

8.3.2

Issue: In rare cases, scsrvc.exe might crash with heap corruption.

Workaround:

Open regedit and navigate to: HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Image File Execution Options\scsrvc.exe
Create a DWORD value if it doesn't exist FrontEndHeapDebugOptions
Set its value to 8.

Fixed ACC 8.3.1 Client

MACC-3100

8.2.1

8.3.1

Issue: System crash with BugCheck 3B.

NOTE: If the current state of bit-16 in CustomerConfig is 0, flipping it to 1 in Disabled/Enable/Observe/Inventory mode can result in a crash.

A similar crash can be observed if this bit is 0 and a product upgrade is undertaken. The reason is because the upgrade process might set this bit to 1.

This problem only affects Windows 10 and Windows Server 2016 and later.

Fixed ACC 8.2.6 Client

MACC-8396

8.2.1

8.2.6
Update 6

Issue: Bug check E3 occurs with SWIN.SYS after you upgrade to ACC 8.2.1 (Update 5).

Fixed ACC 8.2.1 Client

MACC-8568

MACC-8391

8.2.1

8.2.1
Hotfix 8 (RTS)

Issue: A kernel memory leak occurs in MFE0 and Q* tags after you upgrade to ACC 8.2.1 (Update 5).

MACC-8375

8.2.1.114

8.2.1
Update 5
Repost

Issue: Communication issues occur with MA 5.0.6 when ACC 8.2.1.114 and VSE 8.8 are installed on Windows 7 and 2008 R2.

KB91933

8.2.1.407

8.2.1
Update 5
Repost

Issue: The Execution Control feature causes CMD and other processes to crash after you upgrade from any version of ACC to 8.2.1.407 (Update 5).

KB91331

8.0.0

8.2.1
Update 5
Repost

Issue: The temporary folder C:\Windows\Temp\Solidcore isn't removed after you upgrade ACC.

1027687

KB84043

8.0

8.2.1
Update 5
Repost

Issue: Upgrade to ACC fails for endpoints.

1269088
1270552

8.2.1

8.2.1
Update 5
Repost

Issue: Addition of new MPT 19.4-175.4 now solves the solidification problem.

1270348

8.2.1

8.2.1
Update 5
Repost

Issue: Extra check in of pkgc_allow_installation configuration doesn't restrict the bypassing application allow list.

NOTE: Previously resolved with 8.2.1 Update 4 (RTS).

1269322

8.2.1

8.2.1
Update 5
Repost

Issue: The file scorsapr.dll is now signed with the company certificate.

1268997

8.2.1

8.2.1
Update 5
Repost

Issue: The Execution Control configuration resets after reboot.

1269626

8.2.1

8.2.1
Update 5
Repost

Issue: Boot time is impacted by Package Control's registries enumeration.

1267287

8.2.1

8.2.1
Update 5
Repost

Issue: Loading of Summary Events in Event Viewer takes more time when AC 8.2.1.114 is enabled.

1258932

8.2.1

8.2.1
Update 5
Repost

Issue: An unsolidified binary file fails to execute after you rename it to pre-existing.

1262920

8.2.1

8.2.1
Update 5
Repost

Issue: Windows update now successfully executes on comctl32.dll and gdiplus.dll after reboot.

1257931

8.2.1

8.2.1
Update 5
Repost

Issue: Access denied message is shown when you run a file with Windows short name notations.

1258074

8.2.1

8.2.1
Update 5
Repost

Issue: Solidification status now remains the same when you run chkdsk.

1264297

8.2.1

8.2.1
Update 5
Repost

Issue: ACC configured with limited features activation fails to load successfully after a service restart.

1268086

8.2.1

8.2.1
Update 5
Repost

Issue: ACC service no longer crashes when new updater rules are added.

1273790

8.2.1

8.2.1
Update 5
Repost

Issue: VTP isn't added to handle Microsoft allow listed binaries.

TSDE-1863

8.2.1

8.2.1
Update 5
Repost

Issue: ePO property "upgrade status" isn't updated after reboot.

MACC-6791

8.2.1

8.2.1
Update 5
Repost

Issue: Temporary folder is removed on upgrade.

MACC-5898

8.2.1

8.2.1
Update 5
Repost

Issue: The swin1.sys file is deleted after Solidcore is set as Enable.

MACC-6649

8.2.1

8.2.1
Update 5
Repost

Issue: Windows Updates don't fail with Solidcore in any mode.

MACC-6708

8.2.1

8.2.1
Update 5
Repost

Issue: The file InteLPPM.sys isn't blocked.

1259045
1261196
1267181
1267203

8.0.1

8.2.1.1
Update 3

Issue:

Updated dlls aren't updated in the local allow list.
February Updates fail on 8.0.2 and 8.2.1.
Microsoft update installation fails and rolls back.
Execution Denied (checksum-mismatch) when a file is modified through a hard link.

1254892

8.0.2

8.2.1
Update 3

Issue: Files marked as updater don't work as expected.

1254539

8.0.0

8.1.0

Issue: Error “another generic command is running” while inventory is fetched.

1253554

8.0.0

8.2.1.1
Update 3

Issue: Added rules to skip pagefile.sys, hiberfil.sys, and swapfile.sys files from deny exec feature.

1247415

8.0.1

8.2.1.143 Update 3

Issue: MAC 8.x sadmin trusted command now can be configured with multiple pathnames.

1253497

8.2.0

8.2.1
Update 3

Issue: Process path is shown as c:\$recycle.bin\.\.\.

1256965

8.2.0

8.2.1
Update 3

Issue: Testing Application Control 8.2.0.156 and system crash with bug check 1E encountered.

1257100

8.2.1

8.2.1
Update 3

Issue: CASP doesn't work and it can't detect an exploit in ACC 8.2 and later.

1258630

8.2.0

8.2.1
Update 3

Issue: The attr -c can't bypass the CASP process on ACC 8.2.x.

1258932

8.2.1

8.2.1
Update 3

Issue: Unsolidified binary file is executable with renaming it to other inventory file name.

1259008

8.2.1

8.2.1
Update 3

Issue: After solidification completes, the system is stuck in update mode unable to control client.

1259925

8.2.1

Issue: Files added to the updater process remained unsolidified after you upgrade to 7.0.1.462.

1260583

8.2.1

8.2.1
Update 3

Issue: Safe-mode-protect feature doesn't work in the mentioned version.

1261927

8.2.1

8.2.1
Update 3

Issue: BugCheck 3B - swin.sys, Win 10 with ACC 8.2.1.

1262892

8.2.1

8.2.1
Update 3

Issue: Uninstall of non-msi applications isn't allowed when 'Allow uninstallation' feature is enabled.

1262925

8.2.1

8.2.1
Update 3

Issue: Solidcore blocks .NET. PS1 in temp folders.

1188255

KB91257

7.0.0

8.2.1 Update 3

8.0.2 Update 1

Issue: [Windows 10] ACC prevents the Windows Defender Update process from running successfully.

Resolution: Apply the correct update for your version of Application Control:

Application Control 8.2.1 Update 3
Application Control 8.0.2 Update 1

See the related article for more guidance.

1247479

KB90785

8.2.0

8.2.1
Update 3

Issue: Upgrade from ACC 8.1.0 to ACC 8.2.0 in Windows 32-bit fails.

Workaround: See the related article for details.

KB91257

8.0

8.2.1
Update 5

8.0.2
Update 1

Issue: Application Control and Change Control driver issues (Windows Update).

Resolution: You must resolidify any system that was upgraded to latest version that was below 8.2.1 release. You only have to resolidify once after upgrade.

NOTE: If the system is newer than 8.2.1 and has been resolidified once, resolidification on upgrade isn't needed.

KB90785

8.2.0
8.1.0

8.2.1

Issue: System processes fail to start during upgrade of ACC from 8.1.x to 8.2.0.

Workaround: Disable MP-CASP before you upgrade to the latest version of ACC.

1232088

8.1.0

8.2.1.114

Issue: FILE MODIFIED events aren't generated for any file with the "monitor file" rule added.

1247171

8.2.0

8.2.1

Issue: Windows 7 endpoints turn into limited activation after you send a full activation task.

Workaround: To make a full feature activation on ACC 8.2.0 and later for Windows 7:

Send an Enable task as a Limited Feature Activation.
Restart the client.

1247758

8.1.1

8.2.1

Issue: Extension upgrade from ACC 8.1.1 to another ACC version fails in step 6.

Fixed ACC 8.2.0 Client

1239874

8.1.0

8.2.0

Issue: The Default rule groups are removed after you upgrade to Solidcore ePO Extension 8.1.0.

1241551

8.1.0

8.2.0

Issue: Policy Discovery events aren't displayed on the Policy Discovery page after events are sent from endpoint.

1245623

8.1.0

8.2.0

Issue: When you try to import the inventory created as an XML file, the following error is displayed: Inventory could not be imported.

124551

8.1.0.129
8.1.1.103

8.2.0

Issue: Application Control Policy Discovery events missing when extension 8.1.0.129 or 8.1.1.103 are installed.

Fixed ACC 8.1.1 Client

1237379

KB90585

8.1.0.169
8.1.0.179

8.1.1

Issue: Service fails to start after installation is complete on Windows 10.

1227853

8.1.0

8.1.1

Issue: When you create a custom filter on the System Tree page the application service crashes.

Fixed ACC 8.0.0 Client

1197702

KB89466

8.0.0

8.0.0.817

Issue: Script As Updater injection into all application and system processes results in degraded performance and system crashes.

1203341

KB89678

8.0.0

8.2.1

Issue: ACC prevents installation of Endpoint Security (ENS).

Workaround: Disable Memory Protection.

KB89743

8.0.0.651

8.0.0.783

Issue: ACC doesn't communicate with ePO when you use MA 5.0.6.

1205042
1221210
1232397
1220969
1231655
1240535

KB90607

8.0.0

8.0.1.233

Issue: Bug check 7f system crash occurs on systems protected by Application Control.

KB90083

8.0.0.855

8.0.1.223

Issue: ACC causes a system crash when a limited activation Enable task is run.

KB88747

8.0.0

Latest extension

Issue: Web MER.exe is blocked on the client when Application Control is in the Enable mode.

1188886

8.0.0

8.0.1.223

Issue: AC8 takes twice as long to solidify than AC7.

KB89386

8.0.0

8.0.1.223

Issue: ACC 8.0 consumes a greater number of resources than the previously released versions, resulting in performance issues.

1186809

8.0.0

8.0.0.817
Update 2

Issue: The PKG-CTRL-ALLOW-Uninstall gives CMD updater permissions, when CMD /C is in the UninstallString Registry string.

1193571

8.0.0

8.0.0.783
Update 1

Issue: The system doesn't start in Observe or Update mode if SAU is enabled.

1049573

KB85156

8.0.0

8.0.0.651

Issue: The system slows or stops responding while accessing files over the network.

1269043
1254539

KB91353

8.0.2.228

n/a

Issue: Application Control SC: Run Commands quit when policy enforcement occurs.

Resolution: Create an Application Control Client task. See the related article for details.

1250277

8.2.0

n/a

Issue: When you enable the Application Control license with limited activation or Change Control license, it results in a crash after you upgrade from 8.1.0.179 to 8.2.0.140.

Resolution: See the related article for details.

1269043

KB91353

8.2.1

n/a

Issue: Application Control SC: Run Commands quit when policy enforcement occurs.

Resolution: See the related article for details.

1271531

KB91528

8.1.0

8.3.0
8.2.6

Issue: The Application Control installer enters a hung state during a new installation or upgrade from a previous version.

Resolution: See the related article for details.

1189702

8.0.0

n/a

Issue: The scsrvc.exe service hangs during restart when in Disable mode because Cryptsvc starts after our service.

Resolution: Microsoft suggests that you add a dependency in Solidcore service: sc config scsrvc depend= cryptsvc.

8.0

MA
5.0.5

Issue: MA shows high CPU consumption with ACC installed.

1177471

KB88869

8.0

Win 10 RS2

Issue: High CPU consumption occurs when Windows Credential Manager is enabled on clients with Application Control installed.

KB89679

8.0.0.651

n/a

Issue: Solidifier hangs on reboot when going from enable mode to disable mode.

1168594

KB88271

8.0

n/a

Issue: VTP trust for ACC is lost after you install MA.

KB86638

8.0

n/a

Issue: Performance issues on Application Control endpoints when Global Threat Intelligence and Threat Intelligence Exchange communication fails.

Resolution: Disable GTI/TIE in the policy. See the related article for details.

Back to Contents

Client Issues - Won't Fix - See the related articles for a resolution or workaround.

Reference

Found
In

Fixed
In

Description

599348

8.0

n/a

Issue: On viewing the properties of a file on the local drive, deny-write and deny-exec events are generated for the solidified and unsolidified files, respectively.

1269943

KB91502

8.2.0
8.2.1

n/a

Issue: An executable file can't be started from a trusted share or mapped drive.

Workaround: See the related article for details.

1181193

KB89179

8.0

n/a

Issue: Application Control prevents Data Loss Prevention policy enforcement on files attached to outgoing mail.

KB91353

8.2.1
8.0.2.228

n/a

Issue: Application Control SC: Run Commands end when policy enforcement occurs.

Resolution: Set MaplCommLostRestart=0.

KB77610

8.0

n/a

Issue: ACC might not switch the protection mode with Windows FBWF installed.

KB90849

8.0

n/a

Issue: File Write Denied events are recorded when a change to the edb.log file is tried.

Back to Contents

Client Issues - Expected Behavior - See the related articles for an explanation.

Reference

Found
In

Fixed
In

Description

TSDE-15336

KB97058

8.4.0

n/a

Issue: The Sysprep process might fail when TACC is in Update mode, leading to failure in deploying the Windows Master Image.

Workaround: This issue occurs becuse of an enhancement done in TACC 8.4.0 for registry protection in Update mode. See KB97058 for more details and a workaround.

MACC-8314

KB92081

8.2.1

n/a

Issue: ACC reports 8.2.1.407 on Swin.sys when 8.2.1 (Update 5 Repost) is installed.

1213956

KB90522

8.0.0.950

n/a

Issue: The path is on an unsupported volume (error on virtual drives after installation of Application Control).

KB88915

8.0

n/a

Issue: Exclusions for ENS/VSE with ACC to improve post-installation performance.

KB86758

8.0

n/a

Issue: Application Control denies ZIP files when run in the context of Java.exe or Javaw.exe.

KB90021

8.0.0

n/a

Issue: Digitally signed files lose the signature when moved from one client system to another.

KB88091

6.x

n/a

Issue: Application Control causes a Windows error event to occur when a new USB disk is connected to a solidified client.

Back to Contents

Critical Solidcore Extension known issues

Extension Issues
Reference	Related Article	Found In	Fixed In	Description
MACC-10698	-	8.3.3	8.3.4	Issue: Bug check is observed when an invalid memory region is accessed. The issue occurs when one thread is trying to modify the utl sid hash while the other is trying to access it. This is a timing issue. As the utl sid hash isn't modified often, the issue is rare.

Non-critical Solidcore Extension known issues

Contents

Solidcore Extension - Under Investigation
Solidcore Extension - Fixed
Solidcore Extension - Won't Fix

ACC Extension - Under Investigation
Reference	Related Article	Found In	Fixed In	Description
MACC-11147	-	8.3.5	-	Issue: The Orion log lists a communication issue with Global Threat Intelligence (GTI) when a user opens any Policy Discovery request details page in the UI.
MACC-11212	-	8.3.5	-	Issue: There's a failure to import a rule group XML with multiple entries for the installer where the checksum is NULL. You see the following message: Data with same key already exists in Database. Workaround: Delete the Unique constraint from the database, import the rule group, and create the constraint. For instructions, contact Technical Support.
MACC-10997	KB90036	8.3.4	-	Issue: ACC 8.3.4 Client package can't be checked in to ePO 5.9.1 by default to the Master Repository. Workaround: See the Related Article.
MACC-10905	-	8.3.4	-	Issue: When a file is renamed in a case sensitive folder, the old entry isn't removed from the Inventory. Workaround: No Workaround as the functionality at the client isn't impacted.
MACC-10981	-	8.3.4, 8.3.3	-	Issue: When two Binaries are present with the same name under a case sensitive path, only one file is reflected in the ePO Inventory page. Workaround: No Workaround as the functionality at the client isn't impacted.
MACC-10957	-	8.3.4, 8.3.3	-	Issue: Database errors are seen intermittently while parsing the policy Discovery request. This issue is only seen when Binary info is missing in the Policy Discovery XML generated by the client.
MACC-10987	-	8.3.4	-	Issue: Errors are reported intermittently for GTI communication in the Orion.log file. Workaround: This error can be ignored since there's no functionality impact.
MACC-10735	-	8.3.3	-	Issue: After Extension upgrade, newly added configurations under Trellix General (Configuration) Policy for a user-defined policy aren't updated on Endpoint. The reason is because, currently, the migration task doesn't modify user-defined policies. So, on upgrade, the migration task doesn't store new UI values for user-defined configuration policies in the database. Workaround: Open and save the policy manually to update these changes in the policy database. NOTE: After you save the policy, send a wake-up call on the endpoints.
MACC-10632	-	8.3.3	-	Issue: With Case-sensitivity Enabled on the Parent folder, when ACC tries to install on a subfolder under the parent folder, an install rollback occurs as expected. But, clean up of files doesn't happen. Installers leave behind files in the subfolder. Workaround: A manual clean-up is needed.
MACC-10631	-	8.3.3	-	Issue: When Solidcore installation is tried on folders with Case-Sensitivity Enabled, the installer removes the case sensitive folder and creates a case-insensitive folder. Installation is continued instead of a graceful install failure on the case sensitive folder.
MACC-10664	-	8.3.3	-	Issue: Execution is denied for a file when the file copy occurs in Enable mode through a non-updater process and is solidified. This issue is a rare occurrence and a timing issue.
MACC-10511	-	8.3.2	-	Issue: An unknown query is seen running on SQL for a long time, and causes performance issues. Error found in Orion logs: 902 DEBUG [scheduler-InternalTask-thread-19] util.CloudUtil - Converting HashResponseVO to CloudBinaryDetail Workaround: Turn off the following Solidcore setting in ePO's server setting: Synchronize reputation information with GTI Server.
MACC-10103	-	8.3.1.111	8.3.2	Issue: (Cosmetic only) The Enable task doesn't save MP, SAU disablement, or the observe mode option when you click Save. The Pull inventory also experiences the same behavior.
MACC-10035	-	8.3.1	-	Issue: In Windows 7, when ACC is upgraded from 8.0.2 to 8.3.1, the reboot process takes more than 3 minutes.
MACC-8695	-	8.2.6	-	Issue: After Solidcore is upgraded to 8.2.6 in the Disable mode and ACC is enabled, the Solidcore upgrade property in ePO doesn't get updated. It shows the status as Reboot required, even after multiple reboots. NOTE: The issue occurs only if the upgrade is performed in the "Disable" mode.
MACC-8700	-	8.2.6	-	Issue: When Solidcore is upgraded to 8.2.6 and rebooted, the ePO Solidcore product version under system "Properties" doesn't display the upgraded product version. The issue is intermittent.
1254921	-	8.2.0	8.2.1 Update 3	Issue: When you add two or more Solidcore rules to an Integrity Monitoring policy for Windows, after you save the policy, only one Solidcore Rule is saved. NOTE: Previously resolved with ACC 8.2.121 Hotfix 1.
1255177	-	8.2.1	8.2.1 Update 3	Issue: When the Solidcore Client is enabled with Limited Activation in Observe Mode, Solidcore Client Status is shown as "Observe" instead of "Observe (Limited)." This value shows in the Solidcore Client Status column from the System Tree. NOTE: Previously resolved with ACC 8.2.121 Hotfix 1.
1255936	-	8.2.0	-	Issue: When a rule for updaters is added in an Application Control Rules policy for Windows or UNIX, the rule can be created with three different conditions: None, Library, or Parent. After saving the updater rule with one of the conditions (different to None), if the user tries to edit the rule, the None condition is selected by default. If it's saved again, it's saved as None. Workaround: When editing a rule, change the condition to the one selected originally before saving the policy.
1256249	-	8.2.0	-	Issue: Some Tasks in the Server Task Log remain in Waiting status indefinitely after executing different operations. This action causes all other tasks executed after that to remain in the Waiting status as well. Workaround: To be allowed to perform Server Tasks, restart the ePO services.
1260315	-	8.2.0	-	Issue: When you add a rule for executable files in an Application Control Rules policy for Windows, the rule can be created with three different rule types: Name, SHA-1, and SHA-256. After you save the rule with one of these types, you can no longer change the rule type. Workaround: Delete the rule and create it again with the other rule type.
1262809	-	8.2.1		Issue: After you remove a user who is the owner of one or more Solidcore rules, if anyone tries to access the Solidcore Rules page, the message “An unexpected error occurred” is displayed.
-	KB81304	8.0	-	Issue: Application Control endpoint inventory parsing might cause the SCOR_DATA_CHANNEL table to grow quickly in the ePO database.
-	KB88248	8.0	-	Issue: Stale records appear on the Inventory page when a Purge System Inventory task is run immediately after a client is removed from ePO.
-	KB88255	8.0	-	Issue: Self-Approval Client pop-up text field limitations occur within Application Control. Resolution: The Self-Approval Client pop-up text field has a maximum character limitation of 296 characters. The text field for Self-Approval within ePO has a maximum character limitation of 300 characters. Because of the fixed nature of the text field, scrolling of text within the pop-up field on the client isn't allowed.
1186364	KB89430	8.0	-	Issue: Application Control events are reported back to the ePO server from a client that only has Change Control enabled.
1267790	KB91492	8.2.0	-	Issue: The ACC GTI registered server connection fails in ePO 5.10.
1270782 1270891 1247470	KB91532	8.0	-	Issue: Server task "Solidcore: Send Policy and Inventory Feedback to McAfee GTI Server" runs indefinitely. Workaround: Disable the Solidcore: Send Policy and Inventory Feedback to the GTI Server task.
1147259		8.0.0	-	Issue: An auto-trigger mechanism needs to be added if a later version content-package is already checked in before you install the extension.
1158794	-	8.0.0	-	Issue: The site administrator might see the wrong classification for an APP, which the global administrator shares.
1152557	-	8.0.0	-	Issue: Multiple entries of the help extension are displayed. Workaround: The toc.xml file can be edited; deleting all node tags whose href starts from "mac_700" resolves the issue.
1151953	-	8.0.0	-	Issue: An Internal Server Error is observed when you click the SHA-1 link on the PD detail page.
1169661	-	8.0.0	-	Issue: There's an inconsistency on translation for 'fetch.'
1171354	-	8.0.0	-	Issue: Policy discovery processing might experience performance issues if an inventory pull is performed for 10K or more hosts at the same time.
1171909	-	8.0.0	-	Issue: An improper translation is seen on the message on the Solidcore events page.
1172330	-	8.0.0	-	Issue: An improper translation is seen on the value for the property Upgrade Status: Success.
1242102	KB90646	8.0.0	-	Issue: The Rule group import fails if rules contain SHA-256 installers that aren't added to the Installer tab before import. Workaround: See the related article for details. Back to Contents
ACC Extension - Fixed
Reference	Related Article	Found In	Fixed In	Description
Fixed ACC Extension 8.3.4
MACC-10844	-	8.3.3	8.3.4	Issue: The Orion.log file records multiple internal reputation check errors. Workaround: This issue is resolved. The file no longer has the error message.
MACC-10881	-	8.3.3	8.3.4	Issue: When App Control rules are imported, it displays an error message. Workaround: After the ACC extension upgrade, importing App Control rules work appropriately without any error messages.
Fixed ACC Extension 8.3.3
1249451	KB90818	8.0	8.3.3.122	Issue: High event flow in the SCOR_FD_Data_Channel temporary table results in a deadlock and events stacking up.
MACC-10413	-	8.3.2	8.3.3.122	Issue: Solidcore WebAPI commands appear to be non-functional for change reconciliation. Resolution: The commands now set AR windows for the systems in the supplied list.
MACC-10577	-	8.2.6	8.3.3.122	Issue: An error occurs when you run a query: Invalid column name 'OSServicePack''... Couldn't use view or function 'ePO_USDCA-EPO01.dbo.SCOR_VW_PROPERTIES' because of binding errors' is returned. Resolution: Extension replaced dbo.SCOR_VW_PROPERTIES With dbo.SCOR_VW_PROPERTIES_AGENTGUID
MACC-10505	-	8.3.2.103	8.3.3.122	Issue: Database errors appear in the Application Control inventory. An exception occurred in processing entry for datachannel. com.mcafee.scor.exception.ScorException: DB ERROR
MACC-10511	-	8.3.2	8.3.3.122	Issue: The GTI reputation fetch runs in a loop that causes a performance issue.
MACC-10408	-	-	8.3.3.122	Issue: When you install and run ACC, EDR is unable to runs collectors and reports back to the product interface.
MACC-8337	-	8.3.0.197	8.3.3	Issue: When enabling Solidcore in Inventory Mode with limited activation, the Solidcore Client Task Log displays an incorrect message.
MACC-9528	-	8.3.0.225	8.3.3.122	Issue: Garbled Japanese characters are seen on the Close option on the Common Platform Enumeration page.
MACC-8541	-	8.2.1.229	8.3.3.122	Issue: The 'Disable inheritance' option doesn't function on the browser updater rules.
MACC-10682	-	8.3.2.133	8.3.3.122	Issue: The windows Event ID 142 description appears incorrectly in Korean. Resolution: It now appears in Japanese characters.
MACC-10405	-	8.2.6.103	8.3.3.122	Issue: The certificates listed in KB91662 aren't added as updaters.
MACC-10538	-	8.3.3.118	8.3.3.122	Issue: ePO is overwhelmed with FIM events after you upgrade MA to 5.7.0 or later.
Fixed ACC Extension 8.2.1
1231366	-	8.2.1	8.2.1 Update 5 Repost	Issue: Pull Inventory now works as expected on all systems. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1267576	-	8.2.1	8.2.1 Update 5 Repost	Issue: ACC no longer causes deadlocks on ePO. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1261696	-	8.2.1	8.2.1 Update 5 Repost	Issue: Updater Processes in ACC extension now retain the Parent Process condition through the Edit Updater dialog prompt. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1260315 1266061	-	8.2.1	8.2.1 Update 5 Repost	Issue: Executable file events are now saved successfully as SHA-1 or SHA-256 on the Edit Updater dialog prompt. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1261888		8.2.1	8.2.1 Update 5 Repost	Issue: OL7 Rule Group is now added to Integrity Monitor Solidcore Rules. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1258409	-	8.2.1	8.2.1 Update 5 Repost	Issue: Solidcore Events Query now runs successfully after you upgrade to a later version. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1266119	-	8.2.1	8.2.1 Update 5 Repost	Issue: Automatic Response now works successfully after you add the Full Path filter. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1255936	-	8.2.1	8.2.1 Update 5 Repost	Issue: ACC Rule group now retains the conditions correctly after change. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1243461	-	8.2.1	8.2.1 Update 5 Repost	Issue: The SCCM default rule group is now updated with changes. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1263607	-	8.2.1	8.2.1 Update 5 Repost	Issue: The ACC extension no longer uses high memory or CPU consumption. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1269350	-	8.2.1	8.2.1 Update 5 Repost	Issue: ACC now triggers an Automatic Response when you use "Solidcore events" as "Event Group". NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1268960	-	8.2.1	8.2.1 Update 5 Repost	Issue: The event of "Content Change Tracking" is no longer indicated as garbled characters. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1261903	-	8.2.1	8.2.1 Update 5 Repost	Issue: Performance improvement is seen in loading Policy discovery events. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1262809 1262887 1269610	-	8.2.1	8.2.1 Update 5 Repost	Issue: The “Unexpected Error” message no longer displays when you click “Solidcore rules,” after you remove the owned group user. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1269631	-	8.2.1.121	8.2.1 Update 5 Repost	Issue: You can now use wildcards in write protection exclusion for Application Control and Change Control. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1247470 1270782 1270891	-	8.2.1	8.2.1 Update 5 Repost	Issue: Send Policy and Inventory Feedback to GTI Server now runs as expected. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1263571	-	8.2.1	8.2.1 Update 5 Repost	Issue: ACC extension reflects SHA-256 correctly. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1250845	-	8.1.1.104	8.2.1 Update 4	Issue: Non-English Character no longer crashes the Event Parser. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1262809	-	8.2.1	8.2.1 Update 5 Repost	Issue: Policy discovery events are now displayed correctly in Queries and Reports. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1269768 1269752 1270154	-	8.2.1	8.2.1 Update 5 Repost	Issue: The GTI feature is now supported on ePO 5.10. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1268501	-	8.2.1	8.2.1 Update 5 Repost	Issue: Improved performance on the Policy discovery page now fixes the total item count when a filter is added. NOTE: This issue was previously resolved with 8.2.1 Update 4 (RTS).
1257561	-	8.0.0	8.2.1 Update 3	Issue: When you try to import a group of rules on the Solidcore Rules page, the task fails and shows the message below: Data with same key already exists in Database
1259241	-	8.2.2.144	8.2.1 Update 3	Issue: High memory use of Tomcat after you upgrade Solidcore extension to 8.2.1.114. NOTE: This issue was previously resolved with 8.2.121 Hotfix 1.
1268054	KB91257	8.2.1	8.2.1 Update 3	Issue: Out-dated default rules might cause Windows updates installation failure. Workaround: See the related article for details.
1240399 1240411 1239874 1257561	KB90596	8.0	8.2.1 Update 3	Issue: Rule groups are removed if installer checks fail and generate Rule Group Sanity Check errors. NOTE: This issue was previously resolved with 8.2.121 Hotfix 1.
-	KB84651	8.0	8.2.1 Update 3	Issue: Upgrading the extension for Application Control 6.2.0 and later takes a long time to complete. NOTE: This issue was previously resolved with 8.2.121 Hotfix 1.
Fixed ACC Extension 8.1.1
1173493	KB88261	8.0 7.0	8.1.1.103	Issue: You see the message below: You are not authorized for this operation. This issue occurs when you click the helpdesk notification link of the Request Approval URL in ACC. See the Related Article for more information.
1203024	-	8.0	8.1.1.103	Issue: Skiplist exclusion filters with asterisk in the path can't be saved.
1220637 1210786 1236799	KB90092	8.0	8.1.1.103	Issue: Performance issues occur after installation of the ACC extension.
1224811	KB90254	8.0	8.0.0.950 Hotfix 5	Issue: A GTI communication error occurs between the server and client, with ACC installed.
1212789	KB89386	8.0	8.0.1.223	Issue: ACC 8.x consumes a greater number of resources than the previously released versions, which result in performance issues. NOTE: This issue was previously resolved with ACC 8.0.0.855 Hotfix 3.
1266204 1271125 1271183	KB91462	8.2.1.121	n/a	Issue: An unexpected error occurs when you create an SC Enable task in ePO. Resolution: The fix is attached to the related article. Back to Contents
Solidcore Extension - Won't Fix
Reference	Related Article	Found In	Fixed In	Description
1249255	KB90787	8.0	n/a	Issue: Duplicate users appear in the client policy when the Trusted Users group is synchronized with the Active Directory.
1228409	KB90374	8.1.0.118	n/a	Issue: ENS Web Control Extension is disabled after you install Web Control on a system with ACC 8.1.0.118.1 present. Back to Contents

Related Information

To contact Technical Support, go to the Create a Service Request page and log on to the ServicePortal.

If you are a registered user, type your User ID and Password, and then click Log In.
If you are not a registered user, click Register and complete the fields to have your password and instructions emailed to you.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Application and Change Control 8.x Known Issues (Windows)

Environment

Summary

Related Information

Affected Products

Languages:

Title

Title

Knowledge Center

Application and Change Control 8.x Known Issues (Windows)

Environment

Summary

Related Information

Affected Products

Languages:

Choose your region

Title

Title