Allowing process start and stop notifications when Write Filters are enabled

Version 1

    Verified Product Versions

    AppSense Environment Manager 8.6AppSense Environment Manager 8.5AppSense Environment Manager 8.4AppSense Environment Manager 8.2AppSense Environment Manager 8.1AppSense Environment Manager 8.3

    Introduction

    Environment Manager (EM) agent does not receive Process Start and Process Stop notifications when Write Filters are enabled.

    Detail

    Write Filters prevents EM from registering for callback on process start / stop.

    Add an exclusion for kernel32.dll to the write filter.

                                    File Based Write filter (legacy)

    fbwfmgr /addexclusion c: \Windows\System32\kernel32.dll

                                    Unified Write Filter

    uwfmgr file add-exclusion c:\Windows\System32\kernel32.dll