Environment
- App Control Agent: All Supported Versions
- Microsoft Windows: All Supported Versions
Symptoms
Procmon shows a sharing violation event where the duration column value is "60.99"
Cause
When the agent is analyzing a file, the kernel stalls opens from processes that would generate a sharing violation. This stall has a default maximum time limit of 61 seconds.
Resolution
- Login to the App Control Console
- Navigate in the URL bar to https://<YourServerNameHere>/agent_config.php
- Find the configuration with value "kernelMaxParityAnalysisStallMs=61000"
- Click edit and change this value from 61000 to 120000
