What directories and executables do I need to whitelist for the K1000 agent? (111785)

Return
  • Title

    What directories and executables do I need to whitelist for the K1000 agent?
  • Description

    Sometimes Anti-Virus software may scan KACE executables and tag them as threats.

    This article explains what executables, directories, and registry need to be whitelisted in order for the KACE agent to work properly for patching.
  • Resolution

    The following files and locations are used for patching in the K1000 and should be white-listed from anti-virus or anti-spam.

    Directories that are used in patching:

    • C:\Documents and Settings\All Users\Dell\Kace - Configuration and log files are located here in Windows XP.
    • C:\ProgramData\Dell\Kace - Configuration and log files are located here in Windows 7 and up.
    • C:\Program Files\Dell\Kace - This is where KACE executables reside if the client system is 32 bit.
    • C:\Program Files (x86)\Dell\Kace - This is where KACE executables reside if the client system is 64 bit.
    • C:\Windows\Temp  - This is where downloaded vendor patches are executed
    Executable files in the following directories:
    • C:\Program Files\Dell\Kace and/or C:\Program Files (x86)\Dell\Kace
    • kpatch.exe - Handles K1000 tasks such as scanning and deploying patch payloads
    • mcescan.exe cabarc.exe - This is used to extract Windows cabinet (CAB) files
    • mcescan.cab - This is used by mcescan.exe
    • LM.Detection.exe 
    • LM.Detection.XML  - This configuration file is used for the LM.detection.exe process
    • WindowsUpdateagent.exe - Microsoft file used in patching.
    • ftp.exe
    • C:\Windows\system32\cscript.exe - Deployment scripts are written in VBScript and used during the deployment of patches
    Registry used in patching detection: HKEY_LOCAL_MACHINE\SOFTWARE\Patchlink.com\Discovery Agent\NativeScan


Feedback submitted.

Did this article help?

[Select Rating]

Thank you for your rating!

Close

Request or Create a KB Article »

Product(s):
K1000 Systems Management Appliance
6.2.109330, 6.2.109329, 6.0.101865, 6.0.101864, 6.0.101863, 5.5.x, 5.4.76847, 5.4.70402

Topic(s):
Troubleshooting, Troubleshooting

Article History:
Created on: 8/27/2013
Last Update on: 5/21/2015