This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Device control scanning becomes inactive automicatlly

We've had this issue ever since we put up this policy. We have a Group for restricted device access with the "Device control scanning" enabled, however for some of the computers in that group it shows up as "Differs from policy" and "Device control scanning" Inactive.  We can go in there and manually comply with "Group Device control policy" and it will be fine but the next morning the same issue happens.  This has been an ongoing issue not sure if anyone else have had this issue.  We've tried recreating th policy, using the default policy as enabled, etc, but nothing seems to work.

:47271


This thread was automatically locked due to age.
  • Hello Rullah,

    does the status "revert" after each reboot and are these always the same computers or does it occur infrequently on some/many machines in this group? Which SAV and Windows versions?

    Christian

    :47305
  • Seems to be the same after reboot and it is usually the same computers but sometimes it does vary.  I've seen new ones pop up in the same group as well. I have to comply with the blocked policy for that group every day so I haven't fully tested to see if it is all the computers in that group over time.
    All the machines are running windows 7 professional 64-bit & SAV 10.3.1 VDL4.98G.  thx

    :47641
  • Hello Rullah,

    if it is more or less reproducible the an Agent trace might give some insight. Just the Agent trace is required and the place where the policies are compared can easily be found in the logs. I once had a case where the "live" policy contained a blank (leading or trailing, can't remember) which was stripped when the policy was saved locally. After a restart the comparison failed ...

    Christian

    :47679
  • Thanks for the reply, I'm not sure what you mean by agent trace.  Is it a speicific log you want me to look at? Thank you.

    :47705
  • sorry..missed the hyperlink. Got it. I'll give that a shot. thank you.

    :47707