Mcafee Common Framework folder loses permissions

Posted on 2008-11-06
Last Modified: 2013-11-22
Our company has recently went to Least User Privileges (users are not in local Admin group of their computer).  When a user logs in they get an error message that "The feature you are trying to use is on a network resource that is unavailable". The file it is trying to find is MFEAgent.msi which is in the c:\Docs and Settings\All Users\App Data\Mcafee\Common Framework folder. After giving the users group execute permissions to this folder this error message will go away. The odd thing is every so often (may be after mcafee updates) some of the computers will have this error message reoccur and when the permissions on the folder is checked they have been removed. What would cause this?
Question by:michaliv
    LVL 6

    Expert Comment

    first off I'd give the uers full access to their profiles, ie read & execute.  

    Do yo use roaming profiles?  it could be that the permissions are not roaming properly and you may need to make the changes at both the local PC and the network roaming profile storage location.

    My last thought is that the agent msi file has restrictive permissions on it in your repository and this is being copied to the client PC's.  Check your users have read & execute access to the files in your repository.
    LVL 2

    Author Comment

    We do not user roaming profiles. Users do have read and execute permissions for their profile. The file that it looks for is in the All Users profile under Application Data\Mcafee\Common Framework. The Common Framework folder is the folder that is losing permissions. All other folders are keeping their assigned permissions. This folder keeps defaulting to give Administrators and SYTEM full control and the everyone group read permissions. We set the domain users' group to have read and execute permissions, but it removes these permissions. Any other ideas?
    LVL 6

    Accepted Solution

    How are the permissions on the repository?  These files are copied from the repository by the agent so may be taking the permissions with them.  I'd suggest giving Authenticated Users (or domain users) read and execute access there.

    Also does the problem affect 'new' PCs that have been set up after the change to Least User Privileges?  if it does then it may be worth removing a problem PC and re-adding it to the AV system to see if it sorts it out.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    PREFACE The purpose of this guide is to explain how to manually move a SEP client to a different client group by performing steps on the client-side. These steps may prove particularly useful because they allow the client to move after it has alrea…
    OVERVIEW This guide provides information on the process performed when the Symantec Endpoint Protection (SEP) client checks in with the Symantec Endpoint Protection Manager (SEPM). AUDIENCE Information Technology personnel responsible for suppo…
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    758 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now