Windows Restart Manager restarts services during a Policy Auditor Agent installation or upgrade
Last Modified: 2023-02-23 11:06:15 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Windows Restart Manager restarts services during a Policy Auditor Agent installation or upgrade
Technical Articles ID:
KB95349
Last Modified: 2023-02-23 11:06:15 Etc/GMT Environment
Policy Auditor (PA) 6.4.x, 6.5.x Windows Restart Manager Problem
In rare cases, a PA Agent installation or upgrade might trigger a system reboot, even though PA usually doesn't require it. The Windows Restart Manager restarts services during the PA Agent installation or upgrade. NOTE: Normally, a PA Agent upgrade or installation doesn't require a system restart. But, depending on the environmental variables, the Windows Restart Manager might determine if restarting of the services is needed. Cause
The PA Agent can't control all possible scenarios in which files or processes associated with PA might be in use or locked by other processes. As a result, during the installation or upgrade of a PA Agent, there might be modules that have the PA services loaded into memory. If the services aren't shut down or restarted before the upgrade, the Windows Restart Manager on behalf of the Microsoft Installer (MSI) might perform either of the following actions:
Solution
This behavior is as expected. General advice
Scenario 1 - New PA Agent installation:
Scenario 2 - PA Agent Upgrade:
Scenario 3 - PA Agent is Downgraded:
Affected ProductsLanguages:This article is available in the following languages: |
|