Hello,
We are having a weird problem with Autolearn, out of the blue…
I can’t find anything in the forums… do you have any idea what it can be?
Basically we are telling Landesk that IIS and some PHP code can in fact send EMAIL out, but when the Autolearn period is gone, it defaults back to BLOCK because I think this log is telling me that it’s not able to “save” those actions learned.
I also don’t see any record of the autolearn actions in the Core console and it is not adding anything new to the Truested Files List.
Thanks.
LDSECSVC64.EXE 2012-07-18 15:20:30 (101605463ms): PcPassFile: can't add element 'C:\WINDOWS\SYSTEM32\SCRNSAVE.SCR' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\LOCAL.DEF
LDSECSVC64.EXE 2012-07-18 16:46:05 (106740517ms): PcPassFile: can't add element 'c:\windows\system32\inetsrv\w3wp.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-19 00:52:51 (135943062ms): PcPassFile: can't add element 'C:\Windows\System32\ceiprole.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\LOCAL.DEF
LDSECSVC64.EXE 2012-07-19 05:56:13 (154144260ms): PcPassFile: can't add element 'C:\Windows\System32\wusa.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\LOCAL.DEF
LDSECSVC64.EXE 2012-07-19 08:07:25 (162014978ms): PcPassFile: can't add element 'c:\windows\system32\inetsrv\w3wp.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-19 08:15:23 (162493886ms): PcPassFile: can't add element 'C:\Program Files (x86)\PHP\v5.2\php-cgi.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-19 08:58:44 (165094235ms): PcPassFile: can't add element 'C:\Program Files (x86)\PHP\v5.2\php-cgi.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-19 12:30:58 (177827754ms): PcPassFile: can't add element 'C:\Program Files (x86)\PHP\v5.2\php-cgi.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-19 22:10:16 (212582749ms): PcPassFile: can't add element 'c:\windows\system32\inetsrv\w3wp.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-20 13:32:45 (267928207ms): PcPassFile: can't add element 'C:\Program Files (x86)\PHP\v5.2\php-cgi.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-20 16:28:31 (278474311ms): PcPassFile: can't add element 'c:\windows\system32\inetsrv\w3wp.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-23 05:59:34 (499922816ms): PcPassFile: can't add element 'C:\Program Files (x86)\PHP\v5.2\php-cgi.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-23 07:14:46 (504434240ms): PcPassFile: can't add element 'C:\Program Files (x86)\PHP\v5.2\php-cgi.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-23 08:09:10 (507698608ms): PcPassFile: can't add element 'c:\windows\system32\inetsrv\w3wp.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-24 08:05:05 (593847367ms): PcPassFile: can't add element 'c:\windows\system32\inetsrv\w3wp.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-24 08:58:22 (597044717ms): PcPassFile: can't add element 'C:\Program Files (x86)\PHP\v5.2\php-cgi.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-24 09:04:01 (597383676ms): PcPassFile: can't add element 'C:\Windows\System32\powercfg.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\LOCAL.DEF
LDSECSVC64.EXE 2012-07-24 09:13:18 (597940600ms): PcPassFile: can't add element 'C:\Program Files (x86)\PHP\v5.2\php-cgi.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-25 15:04:44 (705419314ms): PcPassFile: can't add element 'C:\WINDOWS\SYSTEM32\TELNET.EXE' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\LOCAL.DEF
LDSECSVC64.EXE 2012-07-25 15:20:10 (706345616ms): PcPassFile: can't add element 'C:\Windows\system32\telnet.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-25 15:22:57 (706512366ms): PcPassFile: can't add element 'C:\Program Files (x86)\PHP\v5.2\php-cgi.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-25 15:26:23 (706718365ms): PcPassFile: can't add element 'C:\Program Files (x86)\PHP\v5.2\php-cgi.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-25 16:13:29 (709544308ms): PcPassFile: can't add element 'c:\windows\system32\inetsrv\w3wp.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-26 10:32:33 (775483746ms): PcPassFile: can't add element 'C:\Program Files (x86)\PHP\v5.2\php-cgi.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-26 11:03:55 (777365898ms): PcPassFile: can't add element 'c:\windows\system32\inetsrv\w3wp.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-26 16:13:43 (795952435ms): PcPassFile: can't add element 'c:\windows\system32\inetsrv\w3wp.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-26 16:16:22 (796111353ms): PcPassFile: can't add element 'C:\Windows\system32\telnet.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-26 16:52:50 (798299626ms): PcPassFile: can't add element 'C:\Program Files (x86)\PHP\v5.2\php-cgi.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-27 10:15:16 (860841940ms): PcPassFile: can't add element 'C:\Program Files (x86)\PHP\v5.2\php-cgi.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-27 10:16:01 (860886853ms): PcPassFile: can't add element 'c:\windows\system32\inetsrv\w3wp.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-27 11:17:04 (864549616ms): PcPassFile: can't add element 'C:\Windows\Microsoft.NET\Framework\v3.5\csc.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\LOCAL.DEF
LDSECSVC64.EXE 2012-07-27 11:33:57 (865561953ms): PcPassFile: can't add element 'C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\LOCAL.DEF
LDSECSVC64.EXE 2012-07-30 10:17:28 (1120157285ms): PcPassFile: can't add element 'C:\Windows\Microsoft.NET\Framework64\v3.5\csc.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\LOCAL.DEF
LDSECSVC64.EXE 2012-07-30 14:22:01 (1134829007ms): PcPassFile: can't add element 'c:\windows\system32\inetsrv\w3wp.exe' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\REMOTE.DEF
LDSECSVC64.EXE 2012-07-30 15:08:34 (1137622174ms): PcPassFile: can't add element 'C:\WINDOWS\SYSTEM32\IE4UINIT.EXE' to C:\Program Files (x86)\LANDesk\LDClient\HIPS\LOCAL.DEF