Unable to Install 5.77 Agent via FramePkg

[User40442774]

When attempting to run the FramePkg (Create and download agent installation package) on the server hosting the ePO and a windows workstation the windows installer will not kick off. I've verified the FramePkg works as it installed as intended on every workstation and server besides the 2 problem systems.

[cdinet]

What errors are you getting?  It would create a frminst log and mfeagent msi log also.  

[User40442774]

I'm getting:

EventID=1092

xxxxESS11\username ran C:\Users\xxxxx\Desktop\FramePkg_5.7.7\ess.exe which tried to access the file C:\FilePath\FrmInst.exe, violatating the rule "Running files from common user folders', and was blocked. For information about how to respond to this event see KB85494. I navigated to the help page (URL below) regarding resolving access protection policies and I am unable to open McAfee Endpoint Security.

https://kcm.trellix.com/corporate/index?page=content&id=KB89131&locale=en_US

[cdinet]

You would need to disable that ENS access protection rule then.

[User40442774]

I checked my access protection policy and it is disabled. Still unable to install the McAfee Agent.

[cdinet]

The agent may not have gotten the policy.  If you open up the ens console locally on the client, go to settings and view the settings for access protection, it will most likely show enabled.

[User40442774]

I am unable to open the ens console locally on the client as the McAfee/Trellix icon is not visible on my taskbar. I navigated to C:\Program Files\McAfee\Endpoint Security\Endpoint Security Platform\ and attempted to run mfeesp as admin however it will not open. It appears as I have no way to open the ens console locally since the McAfee agent is not installed on the client. I may be wrong but that was my thought? 

[cdinet]

You should be able to go to the start menu in Windows to McAfee, then you will see endpoint security link there