Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Bit9 notifier is not launching on Windows 2003 server when a file block occurs

Bit9 notifier is not launching on Windows 2003 server when a file block occurs

Version

6.x, 7.0.0.x and 7.0.1.2254 (and lower)

 

Issue

The Bit9 notifier is not launching on a Windows 2003 server when a file block occurs.

 

Symptoms

The Bit9 notifier is not launching and this shows on the trace.bt9 file, while high debug level is enabled. When the problem was reproduced the following error occured:

"NotifierClientThread::BroadcastNotifier: WTSEnumerateSessions failed Error[000006A6]

 

Cause

The Bit9 agent uses WTS (Windows Terminal Services) API to discover the relationship between session IDs and signed on users to launch the Bit9 notifier in the correct session. However, these calls fail if the Terminal Server service is disabled.

 

Solution

The issue will be fixed on 7.0.1 Patch 18 or 7.2.0 Patch 6.

 

In the mean time, the work around is to enable the Terminal Server service.

Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎01-14-2015
Views:
352
Contributors