IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Bit9 notifier is not launching on Windows 2003 server when a file block occurs

Bit9 notifier is not launching on Windows 2003 server when a file block occurs

Version

6.x, 7.0.0.x and 7.0.1.2254 (and lower)

 

Issue

The Bit9 notifier is not launching on a Windows 2003 server when a file block occurs.

 

Symptoms

The Bit9 notifier is not launching and this shows on the trace.bt9 file, while high debug level is enabled. When the problem was reproduced the following error occured:

"NotifierClientThread::BroadcastNotifier: WTSEnumerateSessions failed Error[000006A6]

 

Cause

The Bit9 agent uses WTS (Windows Terminal Services) API to discover the relationship between session IDs and signed on users to launch the Bit9 notifier in the correct session. However, these calls fail if the Terminal Server service is disabled.

 

Solution

The issue will be fixed on 7.0.1 Patch 18 or 7.2.0 Patch 6.

 

In the mean time, the work around is to enable the Terminal Server service.

Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎01-14-2015
Views:
750
Contributors