What directories and executables do I need to whitelist for the K1000 agent? (111785)

Return
  • Title

    What directories and executables do I need to whitelist for the K1000 agent?
  • Description

    Sometimes Anti-Virus software may scan KACE executables or files in directories and tag them as threats.

    This article explains what executables, directories, and registry need to be whitelisted in order for the KACE agent to work properly for patching.
  • Resolution

    The following files and locations are used for patching in the K1000 and should be white-listed in any antivirus or monitoring solution.

    Directories that are used in patching:

    • C:\Documents and Settings\All Users\Dell\Kace - Configuration and log files are located here in Windows XP.
    • C:\ProgramData\Dell\Kace - Configuration and log files are located here in Windows 7 and up.
    • C:\Program Files\Dell\Kace - This is where KACE executables reside if the client system is 32 bit.
    • C:\Program Files (x86)\Dell\Kace - This is where KACE executables reside if the client system is 64 bit.
    • C:\Windows\Temp  - This is where downloaded vendor patches are executed

    Executable files in the following directories:
    • C:\Program Files\Dell\Kace and/or C:\Program Files (x86)\Dell\Kace
      • kpatch.exe - Handles K1000 tasks such as scanning and deploying patch payloads
      • LM.Detection.exe - This is the engine that handles patch detection
      • LM.Detection.XML  - This configuration file is used for the LM.detection.exe process
    • C:\Windows\System32\cscript.exe - Deployment scripts are written in VBScript and used during the deployment of patches

    Registry used in patching detection:

    For 32 bit:  HKEY_LOCAL_MACHINE\SOFTWARE\Patchlink.com\Discovery Agent\NativeScan

    For 64 bit: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Patchlink.com\Discovery Agent\NativeScan


Feedback submitted.

Did this article help?

[Select Rating]

Thank you for your rating!

Close

Request or Create a KB Article »

Product(s):
K1000 Systems Management Appliance
6.2.109330, 6.2.109329, 6.0.101865, 6.0.101864, 6.0.101863, 5.5.x, 5.4.76847, 5.4.70402

Topic(s):
Troubleshooting, Troubleshooting

Article History:
Created on: 8/27/2013
Last Update on: 6/3/2015