Remote Registry and WMI

[Former Member]

Dear Mcafee Comunnity,

Dose anyone know why Remote Registrty is neceseary for ePo agent and if WMI is used by it?

We find Remote Registry a potential threat to our organization, and we need to make sure it is not used in any way before disabling the service including WMI (windows management instumentation).

Thank you

[cdinet · Accepted solution]

Whether remote registry uses WMI or not is a question for Microsoft.  How we use remote registry is through agent deployment functions (deploy agent).  KB56386 describes the environmental requirements to deploy agents.  If you use that functionality, disabling remote registry will cause the agent deployments to fail.

[Former Member]

Hi Cdinet,

Thank you for providing link to the article. Considering that we find keeping Remote Registry service running, is it possible to keep the service with a startup type set to Manual, instead of keeping the service running all the time?

Thank you

[cdinet]

You would have to test that to see if that would work.  I can't say for sure whether the deploy agent process would start that service up.  I would think it would need to be already running.