Avatar of tabush
tabush
 asked on

Disable AntiVirus notification in Windows Security Center - (ET)

I am soon deploying AVG 2012 to a lot of computer but there is a bug with some recent versions that it does not register with windows security center. As a result each the users will get popup messages that their computer is unprotected when, in fact, it is.
I am looking to write a script that will disable this notification. Ideally just a registry key i can change. Would need to fix this on windows XP and 7.
Windows BatchVB ScriptScripting Languages

Avatar of undefined
Last Comment
tabush

8/22/2022 - Mon
thombeck

Hi,

for WinXP:
HKEY_Local_Machine\Software\Microsoft\Security Center
--> Set AntiVirusDisableNotify (a REG_DWORD) to Value 1

i think it will be in win7 the same
tabush

ASKER
On windows 7 x64 that key doesnt exist. There is a key called "AntiVirusOverride"in this location:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc

However, when i try to change that it gives me a permissions error (even though im a local admin).
thombeck

Hi,

you must run the regedit with right-click "run as admin".
if this doesn't work, you must temporary change the security settings at this key in the registry


the location you are is right.
set the following keys to the value 1:
AntiSpywareOverride
AntiVirusOverride
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
tabush

ASKER
Still wont let me change and when i try to edit the permissions it tells me "access is denied."

I also tried some registry snapshot tools to find a another key that would do this but no luck. Maybe the answer isn't to do via registry.  Is there a command line that can accomplish this?

Or a registry key i can change that will manually give security center a value for 'anti-virus installed?'
thombeck

Hi,

i've installed a ein7 x64 and your are right.
But the following works:
You need to change the ownership for the key first. (to yourself - Check "Replace owner on subcontainers and objects)
Then change the rights to full for users (important: select the checkbox replace all child object permission with inheritable permission from this object).
after that you can change the value.

To change the security settings back, change the rights for users to read (with check replace on child object).
After that go to owner and assign the SYSTEM as owner back again.
tabush

ASKER
This worked (changes take effect after restart).

Now only issue is that i have few hundred win7 x64 computers to do this on. I think i can change permissions in command line. I read through this article that explains how to do that but i dont understand the exact command i need to run.
http://support.microsoft.com/?kbid=245031
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
tabush

ASKER
Found a script i can use to change registry permissions but unless i'm able to change the ownership the script doesnt work. VBS looks like this:

' Create temp file with the script that regini.exe will use
'
set oFSO = CreateObject("Scripting.FileSystemObject")
strFileName = oFSO.GetTempName
set oFile = oFSO.CreateTextFile(strFileName)
oFile.WriteLine "HKEY_LOCAL_MACHINE\Software\Microsoft\Security Center\Svc [1 5 7 11 17]"
oFile.Close

' Change registry permissions with regini.exe
'
set oShell = CreateObject("WScript.Shell")
oShell.Run "regini " & strFileName, 8, true

' Delete temp file
'
oFSO.DeleteFile strFileName
ASKER CERTIFIED SOLUTION
thombeck

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
tabush

ASKER
I'm not very familiar with powershell but wouldnt a windows 7 computer need a special program installed before it can run a powershell script?