[THIN] Re: Trend Micro Office Scan 7.3 vs Server Protect

That's true Rick. I personally set a policy to remove the process from the
RUN key on all my deployments, but customers are not always comfortable
with that, because it means that you're disabling real-time scanning. I
guess you could then run a Scheduled Task an an Administrative user to
execute the PccNTMon.exe process. But I've not tried that.

Cheers,
Jeremy.



                                                                           
             "Rick Mack"                                                   
             <ulrich.mack@gmai                                             
             l.com>                                                     To 
             Sent by:                  thin@xxxxxxxxxxxxx                  
             thin-bounce@freel                                          cc 
             ists.org                                                      
                                                                   Subject 
                                       [THIN] Re: Trend Micro Office Scan  
             14/06/2007 06:14          7.3 vs Server Protect               
             PM                                                            
                                                                           
                                                                           
             Please respond to                                             
             thin@xxxxxxxxxxxx                                             
                     g                                                     
                                                                           
                                                                           




Hi Jeremy,

But that's why we've got group policies.

In your TS server OU group policy under machine configuration > windows
settings > security settings > file system, and add file > pccntmon.exe.
Just set the ACL on pccntmon.exe to admin read/execute only and remove
users.

It's also a great way to get rid of stuff like the Altiris agent,
ctfmon.exe etc on your terminal servers.

regards,

Rick

--
Ulrich Mack
Commander Australia


On 6/14/07, Jeremy Saunders <jeremy.saunders@xxxxxxxxxxx> wrote:
  I don't know about that. There were definitely some engine issues with
  ServerProtect that caused some issues over the years, but it's a lot less

  intrusive than OfficeScan. OfficeScan runs the PccNTMon.exe process in
  every session, which is its version of the real-time scan monitor. In my
  opinion OfficeScan uses more resources overall. I guess it depends on
  your
  particular environment as to whether or not this really matters.

  Cheers.

  Kind regards,

  Jeremy Saunders
  Senior Technical Specialist

SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com 
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
************************************************

Other related posts: