Unable to install Agent

[Eoin_Keaney]

We are unable to re-install McAfee Agent on Win 2012 server, its unable to create folder c:\ProgramData\McAfee\Agent as some process is locking it.

We used the Endpoint Product Removal tool to remove the previous version.

Please confirm what process would be preventing changes to McAfee Agent folders

[cdinet]

You can use process explorer to see what has a lock on it, or you can also check ens or vse access protection logs to see if there is any rule enabled that is blocking it.  There shouldn't be any remnants if it was removed properly.  You can also look at KB65863 under the manual removal steps to clean up remnants.

[rackroyd]

You might also use the Sysinternals 'handle' command line application.
For details you can refer to it's manual page:

https://docs.microsoft.com/en-gb/sysinternals/downloads/handle

[Eoin_Keaney]

Thanks for the help, I used Process Explorer to see if there was any Handle locking the folder but didn't see anything obvious. I seams to be more of a protection system changing the folders permissions as soon as its created.

Its only C:\ProgramData\McAfee\Agent.... and not any other folder/file name created in the same place.

I will find more time to do a deeper dive on this.

[Eoin_Keaney · Accepted solution]

Issue resolved

Using the Endpoint Product Removal tool

We needed to select the Install certs option first, then the remove all products.

After the reboot we where able to get back to a fresh state and reinstall the agent.