Some product functions don't work in remote sessions without the McAfee icon

Technical Articles ID: KB83532
Last Modified: 2023-02-27 16:47:46 Etc/GMT

Environment

Agent 5.x
Endpoint Security (ENS) Adaptive Threat Protection 10.x
ENS Firewall 10.x
ENS Threat Prevention 10.x
ENS Web Control 10.x
MOVE AntiVirus Multi-Platform 4.x

Microsoft Windows Remote Desktop Protocol (RDP)

Summary

Some of our product functions depend on the McAfee icon in the notification area. On systems that are accessed only using a remote session, the required McAfee icon doesn’t start. The Agent UpdaterUI.exe process runs only in console sessions or a local session. So, the McAfee icon displays only in console sessions or a local session.

This article describes known examples of our product functions that require the McAfee icon to work correctly. When these issues occur, the following conditions are also true:

The McAfee icon isn’t present in the notification area within a remote session using Remote Desktop Protocol (RDP).
The McAfee icon isn’t present in the notification area within a remote connection that uses a session ID that isn’t Console or Session 0. The reason is to prevent user-loaded processes from running for each individual user session.
The following entry is recorded in the Agent_<computer_name>.log when you try to start UpdaterUI.exe for the logon session:

2014-01-24 19:14:43 I Fsv 1076 UsrSpCt UpdaterUI won't be launched for Terminal Services client session (sessionID=2)

Problem 1

The ENS Threat Prevention on-demand scan option Scan only when the system is idle doesn’t work within a remote session. ENS Threat Prevention depends on the McAfee icon to determine whether the system is idle.

On systems accessed only within a remote session, the McAfee icon doesn’t start and the on-demand scanner never runs. To work around this issue, either perform the Solution described below, or disable this option.

Problem 2

When a file with a specific reputation tries to run on your system, ENS Adaptive Threat Protection might prompt you for input to continue. The prompt appears only if Adaptive Threat Protection is installed and configured to prompt. Adaptive Threat Protection depends on the McAfee icon to display prompts. On systems accessed only within a remote session, the McAfee icon doesn’t start, and the prompts don’t appear. Adaptive Threat Protection takes the default action configured by the administrator.

Problem 3

You’re unable to get MOVE Threat Event alert pop-up messages within a remote session. MOVE depends on the McAfee icon to display alert pop-up messages. On systems accessed only within a remote session, the McAfee icon doesn’t start, and the alert pop-up messages don’t appear.

Problem 4

You're unable to have user-based policies enforce on a remote session. User-based policies depend on the McAfee icon to get information on the logged on user.

Problem 5

Windows Toast notification events don’t display to the end user when malware is detected on the system. The notifications depend on the McAfee icon to display alerts.

Solution

If you require our product functions to work within a remote session, use one of the following options:

To enable the McAfee icon for remote sessions, select Enable McAfee system tray icon in a remote desktop session in the General policy.
Configure UpdaterUI.exe to run through a logon script.
Perform the following steps in the remote session to manually display the McAfee icon:
1. Click Start, type Run in the search bar, and click Run.
2. Type the following in the Run textbox and click OK:
  
  C:\Program Files\McAfee\Agent\cmdagent -s (default for Agent 5.x)
  C:\Program Files\McAfee\Common Framework\cmdagent -s (default for Agent upgraded from version 4.x to 5.x)

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Some product functions don't work in remote sessions without the McAfee icon

Environment

Summary

Problem 1

Problem 2

Problem 3

Problem 4

Problem 5

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Some product functions don't work in remote sessions without the McAfee icon

Environment

Summary

Problem 1

Problem 2

Problem 3

Problem 4

Problem 5

Solution

Affected Products

Languages:

Choose your region

Title

Title