Allowing process start and stop notifications when Write Filters are enabled

Version 1

    Verified Product Versions

    Environment Manager 8.6Environment Manager 8.5Environment Manager 8.4Environment Manager 8.2Environment Manager 8.1Environment Manager 8.3

    Introduction

    Environment Manager (EM) agent does not receive Process Start and Process Stop notifications when Write Filters are enabled.

    Detail

    Write Filters prevents EM from registering for callback on process start / stop.

    Add an exclusion for kernel32.dll to the write filter.

                                    File Based Write filter (legacy)

    fbwfmgr /addexclusion c: \Windows\System32\kernel32.dll

                                    Unified Write Filter

    uwfmgr file add-exclusion c:\Windows\System32\kernel32.dll