Stop McAfee Solidifer preventing unauthorized execution error reporting in Windows event log

[User21768621]

Hi, We have 4 x stations with McAfee Application Control 8.2.1.143 standalone installed on them. McAfee Application Control is currently blocking Windows Compatibility Telemetry (CompatTelRunner.exe), which is what we want however its reporting this error hundreds of time a day in the Windows Application Log. I wondered if there was a policy that could be created to stop this specific error relating to CompatTelRunning.exe reporting in the windows application log? Please note, I do not want to stop all "unauthorized execution" errors reporting, only the errors related to CompatTelRunning.exe. Any help would be appreciated. I have some pictures of the error I wish to stop reporting in the application log for your reference if there is a way to attach to ticket. Thanks Toni

[AdithyanT]

Hi @User21768621,

Thank you for your detailed description of the issue. We can indeed allow execution of specific executables without having to allow all unauthorized executions. We need to gain more information on the Event generated (Description). This will tell us what feature is blocking the execution and how we can go about resolving the same.

I would recommend opening a Service Request for the same, however, if you can help me with a screenshot of the event under Application Control events on client side or Solidcore Events page in ePO, I may e able to come up with an exclusions method for you to allow the process execution.

[Kenchee_etf]

Hello @User21768621 

If I understood correctly, you want the block, but you don't want event about the block to be created, correct?

If that is the case you may use MACC feature called Advance Event Filtering aka AEF and that can be configured in MACC policy to tell the client, if you make this block, don't bother me with it aka continue blocking, but don't send events.

*** McAfee Application Control 8.0.0 Interface Reference Guide (McAfee ePolicy Orchestrator) - Filters tab
https://docs.mcafee.com/bundle/application-control-8.0.0-interface-reference-guide-epolicy-orchestra...

I hope this helps.