User-Based Policies aren't processed after you upgrade to File and Removable Media Protection 5.2.0 or later

Technical Articles ID: KB94448
Last Modified: 2023-07-04 06:12:37 Etc/GMT

Environment

File and Removable Media Protection (FRP) 5.2.x and later
Trellix Agent (TA) 5.7.9

Problem

When you upgrade FRP from version 5.2.x or later and reboot, the User-Based Policies are no longer applied to some logged-on users.

The FRP user log records the errors below:

[6500] P:6500,T:5820 FF_ma_policy_translator::FF_ma_policy_translator[0](user based policies)
[6500] P:6500,T:5820 MfeFfMaProvider! MA-LOG: frp, 5 - START: *** Get upb for <domain\user>
[6500] P:6500,T:5820 MfeFfMaProvider! MA-LOG: frp, 5 - Error getting ubp <1601>
[6500] P:6500,T:5820 MfeFfMaProvider! MA-LOG: frp, 5 - END: *** Finished processing ubp for <domain\user>
[6500] P:6500,T:5820 FF_ma_policy_translator::~FF_ma_policy_translator[0]
[6500] P:6500,T:5820 FF_ma_policy_translator::FF_ma_policy_translator[0](user based policies)
[6500] P:6500,T:5820 MfeFfMaProvider! MA-LOG: frp, 5 - START: *** Get upb for <domain\user>
[6500] P:6500,T:5820 MfeFfMaProvider! MA-LOG: frp, 5 - Error getting ubp <1601>
[6500] P:6500,T:5820 MfeFfMaProvider! MA-LOG: frp, 5 - END: *** Finished processing ubp for <domain\user>
[6500] P:6500,T:5820 FF_ma_policy_translator::~FF_ma_policy_translator[0]

NOTE: You see this error only after you follow "Solution 2" (user mode tracing) from KB82192 - How to enable debug logging locally on the client.

Cause

TA 5.7.9 introduces a policy-caching mechanism that doesn't cache user-based policies, and incorrect policies are applied.

Solution

Technical Support is investigating this issue. If you experience this issue, log on to the ServicePortal and create a Service Request. Include this article number in the Problem Description field.

Workaround

Add LPC:1 to the 5.4.0 FRP Policy Settings:

Log on to the ePO console.
Click Menu, Policy, Policy Catalog.
Click File and Removable Media Protection 5.4.0.
Locate the Encryption Options policy that needs to be changed.
Click Edit.
In the Advanced Configuration Options section, add LPC:1.
Save the policy.

NOTES:

After the policy is saved, the system must be restarted for the changes to take effect.
For more information about the advanced options, see KB83461 - Advanced debug and configuration options for File and Removable Media Protection.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

User-Based Policies aren't processed after you upgrade to File and Removable Media Protection 5.2.0 or later

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

User-Based Policies aren't processed after you upgrade to File and Removable Media Protection 5.2.0 or later

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title