Allowing process start and stop notifications when Write Filters are enabled

Version 1

    Verified Product Versions

    Environment Manager 8.6Environment Manager 8.5Environment Manager 8.4Environment Manager 8.2Environment Manager 8.1Environment Manager 8.3


    Environment Manager (EM) agent does not receive Process Start and Process Stop notifications when Write Filters are enabled.


    Write Filters prevents EM from registering for callback on process start / stop.

    Add an exclusion for kernel32.dll to the write filter.

                                    File Based Write filter (legacy)

    fbwfmgr /addexclusion c: \Windows\System32\kernel32.dll

                                    Unified Write Filter

    uwfmgr file add-exclusion c:\Windows\System32\kernel32.dll