EPS v.4 – we have errors during implementation.
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
RE: EPS v.4 – we have errors during implementation. - 13.Mar.2008 6:29:54 AM
|
|
|
poma
Posts: 11
Joined: 13.Mar.2008
Status: offline
|
Unfortunately, I don't have permission to add figs (or may be this feature is disabled).
fig.2
The message is:
" 'some program1.exe' - Drive is missing "
description is:
"There is no drive in a device. Insert drive in device \Device\Harddisk3\DR4"
Where 'some program1.exe' are some programs those automatically start during logon (this error is occurred when users logs on to systems)
Where 'some program1.exe' is programs such as WINWORD.exe or EXCEL.exe (this error is occurred when users are trying to start some applications (Word, Excel, etc.)
After about 5 clicks on the button <Cancel> (alternatively there are <Retry> and <Continue> buttons) the message is closed and the application (for example WINWORD) is started.
< Message edited by poma -- 13.Mar.2008 6:59:52 AM >
|
|
|
|
|
RE: EPS v.4 – we have errors during implementation. - 20.Mar.2008 12:12:57 PM
|
|
|
Sven Berger
Posts: 184
Joined: 25.Feb.2008
Status: offline
|
Hi poma,
Given that the installation stopped at 75%, but the services are in fact running onthe target machine, I think we can assume that we are dealing with a faulty installation. The behaviour towards "some programs" that you described in your second post is certainly unusual (i.e. I have not heard of it).
When the installation failes, there are htree main culprits: Remote Registry on the target machien is not running, Anti-Virus is interfereing, or a router between the machines is active on port 1116 (communication port between the Agent and the EPS Machine).
I would suggest you use one of the machines as a test machine ad disable (briefly) Anti-Virus on that machine. As for the Remote Registry, try to open the registry of THAT machine using the regedit of the EPS machine ("Connect to -> another machine"). Ensure you are running regedit under the same credentials as the EPS Service.
Apart from that, I think that this is a case for the Tech Support Team. When you contact them, please provide a link to this thread, so they can see what I have suggested so far.
_____________________________
Sven Berger
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software
|
|
|
|
|
RE: EPS v.4 – we have errors during implementation. - 25.Mar.2008 4:56:32 AM
|
|
|
poma
Posts: 11
Joined: 13.Mar.2008
Status: offline
|
We think that the reason of this errors is mounting mode of the internal card-reader devices.
There are 4 ports in card-reader, so we have 4 different errors. The error occurs when we connect ports of card-reader as NTFS-folders not like drive letters (not like E:, F:, etc..).
|
|
|
|
|
RE: EPS v.4 – we have errors during implementation. - 6.Apr.2008 1:32:48 PM
|
|
|
Sven Berger
Posts: 184
Joined: 25.Feb.2008
Status: offline
|
Hi Poma,
If you could live with whitelisting the devices, then that would be the way forward. You can whitelist the device by connecting it to a machine and then scanning that machine for connected devices. Failing that, you could always go into Device Manager of the machine where the device is connected to and retrieve the devices' "hardware ID". Once you have that, you can whitelist it because the "hardware ID" is what EPS uses in its Device database.
_____________________________
Sven Berger
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software
|
|
|
|
|
RE: EPS v.4 – we have errors during implementation. - 7.Apr.2008 2:38:13 AM
|
|
|
poma
Posts: 11
Joined: 13.Mar.2008
Status: offline
|
In one word, we found two bugs (may be features):1) If we mount a card-reader as “NTFS-folders” (not as a “letter”, for example, “Drive K”), we have error-popup messages when we are trying to run any applications (for example, WINWORD.exe). And it doesn’t matter, what we want – to prevent access or allow access to card-reader. Error message disappearing after agent deinstallation.
2) If we mount a card-reader as “NTFS-folders” (not as a “letter”, for example, “Drive K”), the security policies does not working correctly. We have a full access to card-reader (for, example SD-card), even if it is denied by permission settings.i.e.I set a full access to SD card for users who are the member of “GFI_ESEC_SecureDigital_FullAccess” group (Status "Full Access").So, the users that are NOT belonging to this group should not have access to SD card. But they have!!! This is occurring when the card reader is mounted as a NTFS-folder.
|
|
|
|
|
RE: EPS v.4 – we have errors during implementation. - 7.Apr.2008 2:43:52 AM
|
|
|
Sven Berger
Posts: 184
Joined: 25.Feb.2008
Status: offline
|
Hi Poma,
can you tell us what device you are talking about?
_____________________________
Sven Berger
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software
|
|
|
|
|
RE: EPS v.4 – we have errors during implementation. - 7.Apr.2008 5:48:27 AM
|
|
|
poma
Posts: 11
Joined: 13.Mar.2008
Status: offline
|
I'm talking about the following devices: card readers (mounted as NTFS-folders, not like a letters) and SD cards (Kingston 1GB MICRO SD).
My domain account is not included in the group "GFI ESEC SecureDigital FullAccess", therefore I should not have access to any SD cards.
But when card-reader's ports/slots are mounted as NTFS-folders, I have granted full access to SD card and may use it as a storage device (I can copy any data to it).
|
|
|
|
|
RE: EPS v.4 – we have errors during implementation. - 20.Jun.2008 2:05:35 PM
|
|
|
walter
Posts: 2
Joined: 20.Jun.2008
Status: offline
|
i have identical problem with the 75% install failure and then unable to remove the agent.
remote registry connects no problem.
Any luck finding what the problem is?
|
|
|
|
|
RE: EPS v.4 – we have errors during implementation. - 20.Jun.2008 3:29:08 PM
|
|
|
walter
Posts: 2
Joined: 20.Jun.2008
Status: offline
|
having investigated the 75% installation problem further. It appears to be a problem with the windows installer. The error that comes out is that it does not have permission to write to the GFI director - in particular the policysetting xml file.
There is obviously some form of protection on that entire directory structure so there is way to modify those setting.
Therefore GFI will have to advise how to get past the problem
|
|
|
|
|
RE: EPS v.4 – we have errors during implementation. - 23.Jun.2008 4:18:20 PM
|
|
|
DrewE
Posts: 436
Joined: 28.Apr.2008
From: Cary, NC
Status: offline
|
Walter,
I have not heard of many issues with this upgrade process. I would recommend opening a trouble ticket at http://support.gfi.com so we can investigate. Are you in an environment with 'strict' security requirements? Could the C$ share not be accessible to the interface?
If the service is running as a Domain Administrator, and you have local admin rights to the machine in question with that account, then we'll need to examine your log files.
_____________________________
Drew Easley - Technical Support Representative
GFI Software - www.gfi.com
|
|
|
|
|
RE: EPS v.4 – we have errors during implementation. - 30.Jun.2008 3:25:28 AM
|
|
|
poma
Posts: 11
Joined: 13.Mar.2008
Status: offline
|
2 walter
I have solved this issue.
Look at the system service "GFI EndPointSecurity Service" on GFI Server. By default this service is started with log-on credentials "LocalSystem", and as far as I remember, this setting is taking place even you configured some another name during installation process.
So, stop this service "GFI EndPointSecurity Service". Configure Log-On settings on this service (you need to specify name of Domain Administrator). Also, you need to configure "LogOn Credentials" in the GFI Console. This setting should be as "Use the security context under witch the GFI Service is running".
Start the GFI EndPointSecurity Service" and try implementation.
with regards
< Message edited by poma -- 30.Jun.2008 3:28:21 AM >
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
