Policy not present on all systems

[Former Member]

Hello everyone,

I have the following problem with our ePO.

We have around 800 clients and I have to maintain an exception for a program. So far everything is good.

But now I see that the policy in which I maintained the exception - On-Access-Scan My Default - is only available on 101 systems.

I have the following questions:

1. Where can I see which clients the policy is applied to?

2. What do I have to do to have the policy applied to all systems?

In general, this is the "Endpoint Threat Prevention" policy.

Many thanks for your help!

Chris

[cdinet]

1. Where can I see which clients the policy is applied to?

In queries and reporting, there is a default query - applied policies by policy name that you can run to find which systems has it applied.

2. What do I have to do to have the policy applied to all systems?

It should be applied at my organization.  If it is not being applied, you need to check agent logs for any errors applying policies.  The masvc log will show any policy enforcement errors.  If you find errors, you can try recreating the policy from mcafee default and see if that applies.  It is possible there may be some corruption in the policy, 

[Former Member]

Hello cdinet,

thanks for you fast answer.

Question 1 is solved! Thanks!

Question 2:

Can you please tell me, where i can find the masvc log?

Thank you!

[cdinet]

c:\programdata\mcafee\agent\logs.

Programdata is a hidden folder.  You can either show hidden folders, or just copy that location and paste in windows explorer and it will open.

[Former Member]

Hi,

i can not see any errors in the masvc.log.

I only see on my client that there is no policy for "Endpoint Security for Threat Prevention".

On my client there are only policies for:

Here are the policies for "Endpoint Security Threat Prevention":

What is wrong in our ePO?

Thanks for your help!

[cdinet]

That might indicate the agent doesn't see ens installed, or some other issue on the client.  Since that would require looking at logs for us to assist further, please open a ticket with McAfee.  We do not advise putting logs here, as they contain sensitive info.

[Former Member]

---

@tellpizzahut wrote:

1. Where can I see which clients the policy is applied to?

In queries and reporting, there is a default query - applied policies by policy name that you can run to find which systems has it applied.

2. What do I have to do to have the policy applied to all systems?

It should be applied at my organization.  If it is not being applied, you need to check agent logs for any errors applying policies.  The masvc log will show any policy enforcement errors.  If you find errors, you can try recreating the policy from mcafee default and see if that applies.  It is possible there may be some corruption in the policy, 

---

Effective and interesting post for reading