Mcafee Common Framework folder loses permissions

Our company has recently went to Least User Privileges (users are not in local Admin group of their computer).  When a user logs in they get an error message that "The feature you are trying to use is on a network resource that is unavailable". The file it is trying to find is MFEAgent.msi which is in the c:\Docs and Settings\All Users\App Data\Mcafee\Common Framework folder. After giving the users group execute permissions to this folder this error message will go away. The odd thing is every so often (may be after mcafee updates) some of the computers will have this error message reoccur and when the permissions on the folder is checked they have been removed. What would cause this?
LVL 2
michalivAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

acmpCommented:
first off I'd give the uers full access to their profiles, ie read & execute.  

Do yo use roaming profiles?  it could be that the permissions are not roaming properly and you may need to make the changes at both the local PC and the network roaming profile storage location.

My last thought is that the agent msi file has restrictive permissions on it in your repository and this is being copied to the client PC's.  Check your users have read & execute access to the files in your repository.
0
michalivAuthor Commented:
We do not user roaming profiles. Users do have read and execute permissions for their profile. The file that it looks for is in the All Users profile under Application Data\Mcafee\Common Framework. The Common Framework folder is the folder that is losing permissions. All other folders are keeping their assigned permissions. This folder keeps defaulting to give Administrators and SYTEM full control and the everyone group read permissions. We set the domain users' group to have read and execute permissions, but it removes these permissions. Any other ideas?
0
acmpCommented:
How are the permissions on the repository?  These files are copied from the repository by the agent so may be taking the permissions with them.  I'd suggest giving Authenticated Users (or domain users) read and execute access there.

Also does the problem affect 'new' PCs that have been set up after the change to Least User Privileges?  if it does then it may be worth removing a problem PC and re-adding it to the AV system to see if it sorts it out.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.