Endpoint Protection Managed Workstations: Antimalware policy application failed

Hello,
When looking at the Endpoint statistics I have the line for systems failing to apply policy. An easy fix to this is to delete the registry.pol file. I would like to make a collection that automates this task for me. Basically if it reports back failure,
it gets added to a collection, an advertisement runs on it to fix it and redeploy the policy.
The only thing I need to know is the query behind the "Endpoint Protection Managed Workstations: Antimalware policy application failed" so I can make a collection for it. Does anyone happen to know it?
Thanks

Client logs:
Client 1:
Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\WINDOWS\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:27:00 PM 2056 (0x0808)
Failed to apply the policy C:\WINDOWS\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:27:00 PM 2056 (0x0808)
Failed to apply policy with error 0x80004005, retry number : 1 after 60 second. EndpointProtectionAgent 11/3/2014 12:27:00 PM 2056 (0x0808)
Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\WINDOWS\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:28:00 PM 2056 (0x0808)
Failed to apply the policy C:\WINDOWS\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:28:00 PM 2056 (0x0808)
Failed to apply policy with error 0x80004005, retry number : 2 after 60 second. EndpointProtectionAgent 11/3/2014 12:28:00 PM 2056 (0x0808)
Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\WINDOWS\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:29:00 PM 2056 (0x0808)
Failed to apply the policy C:\WINDOWS\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:29:00 PM 2056 (0x0808)
Failed to apply policy with error 0x80004005, retry number : 3 after 60 second. EndpointProtectionAgent 11/3/2014 12:29:00 PM 2056 (0x0808)
Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\WINDOWS\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:30:00 PM 2056 (0x0808)
Failed to apply the policy C:\WINDOWS\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:30:00 PM 2056 (0x0808)
Failed to apply policy with error 0x80004005, retry number : 4 after 60 second. EndpointProtectionAgent 11/3/2014 12:30:00 PM 2056 (0x0808)
Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\WINDOWS\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:31:00 PM 2056 (0x0808)
Failed to apply the policy C:\WINDOWS\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:31:00 PM 2056 (0x0808)
Failed to apply policy with error 0x80004005, retry number : 5 after 60 second. EndpointProtectionAgent 11/3/2014 12:31:00 PM 2056 (0x0808)
Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\WINDOWS\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:32:00 PM 2056 (0x0808)
Failed to apply the policy C:\WINDOWS\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:32:01 PM 2056 (0x0808)
Save new policy state 2 to registry SOFTWARE\Microsoft\CCM\EPAgent\PolicyApplicationState EndpointProtectionAgent 11/3/2014 12:32:01 PM 2056 (0x0808)
State 2 and ErrorCode -2147467259 and ErrorMsg Failed to open the local machine Group Policy and PolicyName Antimalware Policy and GroupResolveResultHash 23496E87C22E7CA5048254CC04CCF582A084C108 is NOT changed. EndpointProtectionAgent 11/3/2014 12:32:01 PM 2056 (0x0808)
Skip sending state message due to same state message already exists. EndpointProtectionAgent 11/3/2014 12:32:01 PM 2056 (0x0808)
Client 2:
Apply AM Policy. EndpointProtectionAgent 11/4/2014 7:27:50 AM 2536 (0x09E8)
Failed to generate AM policy XML with error code 0x8000ffff EndpointProtectionAgent 11/4/2014 7:27:50 AM 2536 (0x09E8)
Save new policy state 2 to registry SOFTWARE\Microsoft\CCM\EPAgent\PolicyApplicationState EndpointProtectionAgent 11/4/2014 7:27:50 AM 2536 (0x09E8)
start to send State Message with topic type = 2002, state id = 2, error code = 0x8000ffff, and message = <Instance><AppliedAmPolicies/></Instance>
EndpointProtectionAgent 11/4/2014 7:27:50 AM 2536 (0x09E8)
Start to send state message. EndpointProtectionAgent 11/4/2014 7:27:50 AM 2536 (0x09E8)
Send state message successfully EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
Firewall provider is installed. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
Installed firewall provider meet the requirements. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
Endpoint is triggered by WMI notification. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
File C:\Windows\ccmsetup\SCEPInstall.exe version is 4.3.215.0. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
EP version 4.3.215.0 is already installed. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
Expected Version 4.3.215.0 is exactly same with installed version 4.3.215.0. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
Handle EP AM policy. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
Apply AM Policy. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
Failed to generate AM policy XML with error code 0x8000ffff EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
Save new policy state 2 to registry SOFTWARE\Microsoft\CCM\EPAgent\PolicyApplicationState EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
State 2 and ErrorCode -2147418113 and ErrorMsg Failed to load WMI instances. and PolicyName Antimalware Policy and GroupResolveResultHash 2B22C160D3BC8DC4BECF08D4F632D4756D4C9622 is NOT changed. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
Skip sending state message due to same state message already exists. EndpointProtectionAgent 11/4/2014 7:27:51 AM 2536 (0x09E8)
Client 3:
Apply AM Policy. EndpointProtectionAgent 11/3/2014 12:26:00 PM 1768 (0x06E8)
Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\Windows\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:26:00 PM 1768 (0x06E8)
Failed to apply the policy C:\Windows\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:26:00 PM 1768 (0x06E8)
Failed to apply policy with error 0x80004005, retry number : 1 after 60 second. EndpointProtectionAgent 11/3/2014 12:26:00 PM 1768 (0x06E8)
Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\Windows\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:27:00 PM 1768 (0x06E8)
Failed to apply the policy C:\Windows\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:27:00 PM 1768 (0x06E8)
Failed to apply policy with error 0x80004005, retry number : 2 after 60 second. EndpointProtectionAgent 11/3/2014 12:27:00 PM 1768 (0x06E8)
Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\Windows\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:28:00 PM 1768 (0x06E8)
Failed to apply the policy C:\Windows\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:28:00 PM 1768 (0x06E8)
Failed to apply policy with error 0x80004005, retry number : 3 after 60 second. EndpointProtectionAgent 11/3/2014 12:28:00 PM 1768 (0x06E8)
Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\Windows\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:29:00 PM 1768 (0x06E8)
Failed to apply the policy C:\Windows\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:29:01 PM 1768 (0x06E8)
Failed to apply policy with error 0x80004005, retry number : 4 after 60 second. EndpointProtectionAgent 11/3/2014 12:29:01 PM 1768 (0x06E8)
Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\Windows\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:30:01 PM 1768 (0x06E8)
Failed to apply the policy C:\Windows\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:30:01 PM 1768 (0x06E8)
Failed to apply policy with error 0x80004005, retry number : 5 after 60 second. EndpointProtectionAgent 11/3/2014 12:30:01 PM 1768 (0x06E8)
Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\Windows\CCM\EPAMPolicy.xml". EndpointProtectionAgent 11/3/2014 12:31:01 PM 1768 (0x06E8)
Failed to apply the policy C:\Windows\CCM\EPAMPolicy.xml with error (0x80004005). EndpointProtectionAgent 11/3/2014 12:31:01 PM 1768 (0x06E8)
Save new policy state 2 to registry SOFTWARE\Microsoft\CCM\EPAgent\PolicyApplicationState EndpointProtectionAgent 11/3/2014 12:31:01 PM 1768 (0x06E8)
State 2 and ErrorCode -2147467259 and ErrorMsg Failed to open the local machine Group Policy and PolicyName Antimalware Policy and GroupResolveResultHash 23496E87C22E7CA5048254CC04CCF582A084C108 is NOT changed. EndpointProtectionAgent 11/3/2014 12:31:01 PM 1768 (0x06E8)
Skip sending state message due to same state message already exists. EndpointProtectionAgent 11/3/2014 12:31:01 PM 1768 (0x06E8)
I have 12 systems total having issues with Policy right now.

Similar Messages

SCOM 2007 R2 Forefront Endpoint Protection Management Pack

Hi All,
Question about Forefront Endpoint Protection Management Pack Alert configuration.
We are receiving “Malware Outbreak” Monitor alert with below Alert Description:
Protected Endpoints Watcher Forefront Endpoint Protection has detected active malware on more than 5% of your computers.
Our customer is asking, How to find out the name of the 5% of computers with affected malware information. Kindly assist me on this. I could find only Watcher node.
Thanks & Regards,
Mohamed Sybulla

Malware outbreak alert show Number of computers with the same malware detected
To Generate report of computer names and version, see
Viewing and printing reports.
To resolve this alert, you can refer below links
http://technet.microsoft.com/en-us/library/bb418869.aspx
http://technet.microsoft.com/en-us/library/ff823761.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical | Twitter:
Mai Ali

Symantec Endpoint Protection Manager Installer Information Script Error

hi
I can't install SEP Manager 14.1 in our windows 2012 R2 server I got an error during the installation.While was installing symantec endpoint production 14.01 , I am getting an error right at the end of the install. I understand that . I should do it with
vbs running for symantec installing. however I dont know How can I do it ?,
"Symantec Endpoint Protection Manager Installer Information - Error 1722. There is a problem with this Windows Installer package. A
program run as part of the setup did not finish as expected. Contact your support personnel or package vendor. Action RunFIPSScript, location: c:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\bin\, command: C:\Windows\SysWOW64\...\FIPSMode.vbs"
-install"

Hi,
I am Chetan Savade from Symantec Technical Support Team.
I think you are talking about SEP 12.1 product. There is not any product by code 14.1.
With reference to mentioned issue there is a Public Kb available. Refer the following KB:
Symantec Endpoint Protection "Error 1722: There is a problem with this Windows Installer package..."
http://www.symantec.com/docs/TECH103131
Possible Solution as per KB: To fix the problem, run the Windows Installer CleanUp utility and then remove Symantec AntiVirus manually. Then, install Symantec Endpoint Protection again.
To learn how to obtain and use the Windows Installer CleanUp utility, read the
Microsoft article Description of the Windows Installer CleanUp Utility.
Click the entry for Symantec AntiVirus or Symantec Client Security, and then click Remove.
If more than one entry appears, remove the earliest program version first. After you remove all entries for Symantec AntiVirus and Symantec Client Security, remove Symantec AntiVirus manually.
To find directions for your version of Symantec AntiVirus, read
Manual uninstallation documents for Symantec Client Security products.
Symantec connect forum link to raise SEP related issue: https://www-secure.symantec.com/connect/security/forums/endpoint-protection-antivirus
Best Regards,
Chetan

Deploy Endpoint Protection while using another AntiVirus application?

Dear friends
I'm configuring SCCM 2012R2 in our network,my question is Do I need to deploy Endpoint Protection to clients while we using Kaspersky Endpoint Security in the perimeter ,actually I installed SCEP but not sure if there is any Conflict between these two programs,or
any advantage might it have...?!
Thanks
Reza Hadad

HI,
I wouldn't use two anti-viruses as a permanent solution. I have used two at the same time during migration scenarios, installting SCEP, when it reports back that it is installed succesfully, put it in a a collection and uninstall the old Antivirus.
I have done it this way a couple of times and I haven't had any co-existence problems.
Regards,
Jörgen
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

Data Protection Manager Agent 2012 R2 install failing

Executing: .\DPMAgentInstaller_x64.exe aura.ad.isillc.com
I get the following console output:
Installing agent and configure for dpmserver =[ad.isillc.com\AURA]
DPMAgentInstaller failed with errorcode =0x80070648, error says: Unknown propert
y.
Check log files in [WINDIR]Temp\MSDPM*.LOG
Press Enter key to close the window\\
The output in the log file named MSDPMAgentBootstrap0Curr is this:
0DD8 0DE4 11/23 23:42:53.667 06 installagent.cpp(155) NORMAL Agent installation started for dpmserver [aura.ad.isillc.com]
0DD8 0DE4 11/23 23:42:53.686 06 bootstrapmsihelper.cpp(219) ACTIVITY The agent bootstrapper is doing prerequisite checks
0DD8 0DE4 11/23 23:42:53.686 06 bootstrapmsihelper.cpp(1366) NORMAL OS version more than or equal to Win2K3SP2.
0DD8 0DE4 11/23 23:42:53.686 06 bootstrapmsihelper.cpp(1397) NORMAL Querying for DPMRA with Upgrade code: {EFF053DE-592F-5574-9AA3-64662A944952}
0DD8 0DE4 11/23 23:42:53.686 06 bootstrapmsihelper.cpp(1471) NORMAL Querying for DPMRA with product code: {6FA0CE18-E1AB-4CA2-B552-03D16516E174}
0DD8 0DE4 11/23 23:42:53.686 06 bootstrapmsihelper.cpp(544) NORMAL KB975759 not appliicable.
0DD8 0DE4 11/23 23:42:53.686 06 bootstrapmsihelper.cpp(564) ACTIVITY The agent bootstrapper is installing prerequisites
0DD8 0DE4 11/23 23:42:53.686 06 bootstrapmsihelper.cpp(683) NORMAL There is an existing msxml6 product found
0DD8 0DE4 11/23 23:42:53.687 06 bootstrapmsihelper.cpp(752) WARNING InstallMSXML method returned code = 230e360
0DD8 0DE4 11/23 23:42:53.687 06 bootstrapmsihelper.cpp(607) WARNING InstallAgentPrereqs failed with errorcode=230e360
0DD8 0DE4 11/23 23:42:53.687 06 bootstrapmsihelper.cpp(267) WARNING PerformAgentInstall failed with errorcode=230e360
0DD8 0DE4 11/23 23:42:53.687 06 bootstrapmsihelper.cpp(171) WARNING InstallProtectionAgent failed with errorcode=230e360
0DD8 0DE4 11/23 23:42:53.687 06 installagent.cpp(82) WARNING Failed: Hr: = [0x80070648] DPMAgentInstaller failed, error says: [Unknown property.
0DD8 0DE4 11/23 23:42:53.687 06 installagent.cpp(82) WARNING ]
0DD8 0DE4 11/23 23:42:56.812 06 bootstrapmsihelper.cpp(700) WARNING Failed: Hr: = [0x80070648] : Encountered Failure: : lVal : ret
0DD8 0DE4 11/23 23:42:56.812 06 bootstrapmsihelper.cpp(574) WARNING Failed: Hr: = [0x80070648] : Encountered Failure: : lVal : hr
0DD8 0DE4 11/23 23:42:56.812 06 bootstrapmsihelper.cpp(236) WARNING Failed: Hr: = [0x80070648] : Encountered Failure: : lVal : InstallAgentPrereqs(silent)
0DD8 0DE4 11/23 23:42:56.812 06 bootstrapmsihelper.cpp(168) WARNING Failed: Hr: = [0x80070648] : Encountered Failure: : lVal : PerformAgentInstall(installargs, silent, skipKB)
0DD8 0DE4 11/23 23:42:56.812 06 installagent.cpp(167) WARNING Failed: Hr: = [0x80070648] : Encountered Failure: : lVal : hrTemp
That's pretty much all the information I have. I've tried disabling the Windows firewall as suggested elsewhere online. The OS installing into is Server 2012 R2. I've tried to install it into a number of different Server 2012 R2 boxes. They all get the same
error.

Hi,
The last three DPM updates had code changes to the DPMFilter.sys driver which tracks block level changes for protected data sources. The DPMFilter cannot be unloaded / patched and reloaded without loosing block level changes which would require a forced
consistency check for all data sources. The decision was made to require the reboot instead of forcing a consistency check for all data sources which could be more disruptive especially for multi-terabyte file servers.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

Integrating SCCM 2012 SP1 Endpoint Protection Manager with SIEM

Team,
Does anyone know how to expose the central SCCM antimalware reporting data to external sources? I would like to take all centrally collated security events and load the data into Arcsight express, e.g. client malware detection events. Are all
client security events logged in a file on the SCCM server before being copied to the SQL database? Or do I have to read a SQL table to get this information? Any help greatly appreciated.
Cheers
Rod

Hi,
You will have to read that from the ConfigMgr database views, start by having a look a the SCCM_EXT.vex_EP_AntimalwareInfectionStatus view.
Regards,
Jörgen
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

Symantec Endpoint Protection Manager

Has anyone taken the time to use SEPM and try an integrate it with MARS? So far i am just seeing a lot of useless (ie not MARS-ABLE) events. If you have had good success let me know. Thank you.
Mike

That would be the case for any device. I'm looking for someone with specific hands-on knowledge of SEPM. thanks anyway. Mike

Cisco Anyconnect 3.X and Symantec Endpoint Protection(SEP11)

We are currently using Cisco Anyconnect ver 3.0.3050 with SEP11. Some users are getting a Port Scan Attack message from SEP11. Never saw this when using our previous Nortel VPN client. Has anyone seen this before?

Try adding an Application exception to your SEP policy.
Creating Centralized Exceptions Policies in the Symantec Endpoint Protection Manager 11
http://www.symantec.com/business/support/index?page=content&id=TECH104326&locale=en_US

Symantec Endpoint Protection on Mavericks Reviews??

It seems like everyone has a review or has reviewed Symantec Norton Internet Security and Norton Antivirus yet not too much has been tested or written on Symantec Endpoint Protection.
Unfortunately we are moving in a direction where we will be installing Symantec Endpoint Protection on all our macs and I am trying to find reviews, whether personal or professional, about SEP and macs.
I know Symantec products in general have been trashed on for mac for a while now but it seems I can't find a good AV test out there that includes it for Mac (as most only contain the two symantec products I mentioned above)
Anyone have any personal experience, or know of any testing done with the Symantec Endpoint Protection on macs within the past year?

Hello Everyone,
I am Chetan Savade from Symantec Technical Support Team.
You can directly install an unmanaged or managed Symantec Endpoint Protection client on a Mac computer if you cannot use or do not want to use Remote Push. The steps are similar whether the client is unmanaged or managed. The only way to install a managed client is with a package you create with Symantec Endpoint Protection Manager. You can convert an unmanaged client to a managed client at any time by importing client-server communication settings into the Mac client.
Check the following articles:
Compatibility between Symantec Endpoint Protection for Mac and versions of Mac OS X
http://www.symantec.com/docs/TECH131045
Symantec Endpoint Protection for Macintosh Frequently Asked Questions (SEP for Mac FAQ)
http://www.symantec.com/docs/TECH134203
Send me DM here https://www-secure.symantec.com/connect/user/chetan-savade if you need any assistance with SEP for MAC.
Best Regards,
Chetan

Endpoint Protection Antimalware Policy SQL 2008

We use SCCM 2012 to manage our antimalware solution (SCEP). We created policies for different servers for example SQL server 2008 R2. We created Endpoint Protection Antimalware policy SQL 2008:
To prevent performance issues MS reccomends to exclude some processes from virus scanning:
%ProgramFiles%\Microsoft SQL Server\MSSQL10_50.<Instance Name>\MSSQL\Binn\SQLServr.exe
%ProgramFiles%\Microsoft SQL Server\MSSQL10_50.<Instance Name>\Reporting Services\ReportServer\Bin\ReportingServicesService.exe
%ProgramFiles%\Microsoft SQL Server\MSSQL10_50.<Instance Name>\OLAP\Bin\MSMDSrv.exe
As you can see we currently use MSSQLSERVER as instance name.
Because we use many different SQL instances we need to restrict the ammount of policies to one and don't want to create seperate policies for different SQL instances. Is it possible to use some kind of wildcard, like: %ProgramFiles%\Microsoft SQL Server\MSSQL10_50.*\MSSQL\Binn\SQLServr.exe,
where instance name is * ?
Is it also possible to monitor the scan status real time? I would like to see which files are being scanned when starting a quick/full scan. From within the SCEP client it isn't possible.
Hope you could help me out.
Sacha

Hey
Thanks for the post ,
As i comprehension Your request - I suggest You to exclude the Parent SQL folder :
%ProgramFiles%\Microsoft SQL Server
It will exclude the all instances under the parent folder .
For file process You have to provide full path name .
"to see which files are being scanned when starting a quick/full scan"
You have to create reporting on the sccm for that :
http://technet.microsoft.com/en-us/library/gg712698.aspx
I'd be glad to answer any question

Endpoint Protection on System Center 2012 Configuration Manager Unhandled exception occurred in your application after changing the excluded files and locations

I added a number of folders and files in the excluded files and locations and after that I am unable to access the Antimalware Policies it gives the following error( I am new at sccm):
Unhandled exception occurred in your application. If you click continue the application will ignore this error and attempt to continue. I you click quit the application will close immediately
Object reference not set to an instance of an oblect
With the following details:
See the end of this message for details on invoking
just-in-time (JIT) debugging instead of this dialog box.
************** Exception Text **************
System.NullReferenceException: Object reference not set to an instance of an object.
   at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlQueryPropertySingleItem.get_BooleanValue()
   at Microsoft.ConfigurationManagement.AdminConsole.ClientAgentSettings.Utilities.CreateSCIResultObject(IResultObject antimalwareResultObject)
   at Microsoft.ConfigurationManagement.AdminConsole.ClientAgentSettings.Utilities.LoadDefaultSettingObjects(ConnectionManagerBase connectionManager, Dictionary`2& defaultSettingObjects, DialogType dialogType)
   at Microsoft.ConfigurationManagement.AdminConsole.ClientAgentSettings.HomePageControl.InitializePageControl()
   at Microsoft.ConfigurationManagement.AdminConsole.SccmPageControlDialog.OnLoad(EventArgs e)
   at System.Windows.Forms.Form.OnCreateControl()
   at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)
   at System.Windows.Forms.Control.CreateControl()
   at System.Windows.Forms.Control.WmShowWindow(Message& m)
   at System.Windows.Forms.Control.WndProc(Message& m)
   at System.Windows.Forms.ScrollableControl.WndProc(Message& m)
   at System.Windows.Forms.ContainerControl.WndProc(Message& m)
   at System.Windows.Forms.Form.WmShowWindow(Message& m)
   at System.Windows.Forms.Form.WndProc(Message& m)
   at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)
   at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
   at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)
************** Loaded Assemblies **************
mscorlib
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.18051 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v4.0.30319/mscorlib.dll
Microsoft.ConfigurationManagement
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.ConfigurationManagement.exe
System.Drawing
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.18022 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
System
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.18045 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll
System.Windows.Forms
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.18046 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
Microsoft.EnterpriseManagement.UI.ConsoleFramework
    Assembly Version: 7.1.1000.0
    Win32 Version: 7.1.3825.0
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.EnterpriseManagement.UI.ConsoleFramework.DLL
Microsoft.ConfigurationManagement.ManagementProvider
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.ConfigurationManagement.ManagementProvider.DLL
System.Xml
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
Microsoft.EnterpriseManagement.UI.Foundation
    Assembly Version: 7.1.1000.0
    Win32 Version: 7.1.3825.0
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.EnterpriseManagement.UI.Foundation.DLL
System.Core
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Core/v4.0_4.0.0.0__b77a5c561934e089/System.Core.dll
System.ServiceModel.Web
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.18045 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.ServiceModel.Web/v4.0_4.0.0.0__31bf3856ad364e35/System.ServiceModel.Web.dll
System.ServiceModel
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.18056 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.ServiceModel/v4.0_4.0.0.0__b77a5c561934e089/System.ServiceModel.dll
SMDiagnostics
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/SMDiagnostics/v4.0_4.0.0.0__b77a5c561934e089/SMDiagnostics.dll
System.ServiceModel.Internals
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.ServiceModel.Internals/v4.0_4.0.0.0__31bf3856ad364e35/System.ServiceModel.Internals.dll
PresentationFramework
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.18058
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/PresentationFramework/v4.0_4.0.0.0__31bf3856ad364e35/PresentationFramework.dll
WindowsBase
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/WindowsBase/v4.0_4.0.0.0__31bf3856ad364e35/WindowsBase.dll
PresentationCore
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_32/PresentationCore/v4.0_4.0.0.0__31bf3856ad364e35/PresentationCore.dll
System.Xaml
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.18016 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xaml/v4.0_4.0.0.0__b77a5c561934e089/System.Xaml.dll
System.Configuration
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Configuration/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll
AdminUI.SmsTraceListener
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SmsTraceListener.DLL
Microsoft.GeneratedCode
    Assembly Version: 1.0.0.0
    Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
Microsoft.EnterpriseManagement.UI.ConsoleFramework.resources
    Assembly Version: 7.1.1000.0
    Win32 Version: 7.1.3825.0
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/en/Microsoft.EnterpriseManagement.UI.ConsoleFramework.resources.DLL
Microsoft.EnterpriseManagement.UI.RibbonConsole
    Assembly Version: 1.0.523.0
    Win32 Version: 3.0.2085.0
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.EnterpriseManagement.UI.RibbonConsole.DLL
RibbonControlsLibrary
    Assembly Version: 3.5.41019.1
    Win32 Version: 3.5.41019.1
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/RibbonControlsLibrary.DLL
PresentationFramework.AeroLite
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.18046 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/PresentationFramework.AeroLite/v4.0_4.0.0.0__31bf3856ad364e35/PresentationFramework.AeroLite.dll
Microsoft.EnterpriseManagement.UI.RibbonLayout
    Assembly Version: 1.0.523.0
    Win32 Version: 3.0.2085.0
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.EnterpriseManagement.UI.RibbonLayout.DLL
Microsoft.Windows.Shell
    Assembly Version: 3.5.41019.1
    Win32 Version: 3.5.41019.1
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.Windows.Shell.DLL
Microsoft.VirtualManager.UI.ViewModel.Core
    Assembly Version: 1.0.523.0
    Win32 Version: 3.0.2085.0
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.VirtualManager.UI.ViewModel.Core.DLL
Microsoft.EnterpriseManagement.UI.Controls
    Assembly Version: 7.1.1000.0
    Win32 Version: 7.1.3825.0
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.EnterpriseManagement.UI.Controls.DLL
Microsoft.EnterpriseManagement.UI.RibbonData
    Assembly Version: 1.0.523.0
    Win32 Version: 3.0.2085.0
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.EnterpriseManagement.UI.RibbonData.DLL
AdminUI.HelpSystem
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.HelpSystem.DLL
AdminUI.UIResources
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.UIResources.DLL
AdminUI.PersonalFolders
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.PersonalFolders.DLL
AdminUI.ConsoleGlobalSearchView
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ConsoleGlobalSearchView.DLL
PresentationFramework.Classic
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/PresentationFramework.Classic/v4.0_4.0.0.0__31bf3856ad364e35/PresentationFramework.Classic.dll
Microsoft.EnterpriseManagement.UI.Controls.resources
    Assembly Version: 7.1.1000.0
    Win32 Version: 7.1.3825.0
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/en/Microsoft.EnterpriseManagement.UI.Controls.resources.DLL
WindowsFormsIntegration
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/WindowsFormsIntegration/v4.0_4.0.0.0__31bf3856ad364e35/WindowsFormsIntegration.dll
PresentationFramework-SystemXml
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.17929
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/PresentationFramework-SystemXml/v4.0_4.0.0.0__b77a5c561934e089/PresentationFramework-SystemXml.dll
PresentationFramework.Aero
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/PresentationFramework.Aero/v4.0_4.0.0.0__31bf3856ad364e35/PresentationFramework.Aero.dll
PresentationFramework-SystemCore
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.17929
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/PresentationFramework-SystemCore/v4.0_4.0.0.0__b77a5c561934e089/PresentationFramework-SystemCore.dll
UIAutomationProvider
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/UIAutomationProvider/v4.0_4.0.0.0__31bf3856ad364e35/UIAutomationProvider.dll
UIAutomationTypes
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/UIAutomationTypes/v4.0_4.0.0.0__31bf3856ad364e35/UIAutomationTypes.dll
AdminUI.Controls
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.Controls.DLL
AdminUI.Common
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.Common.DLL
Microsoft.EnterpriseManagement.UI.WpfViews
    Assembly Version: 7.1.1000.0
    Win32 Version: 7.1.3825.0
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.EnterpriseManagement.UI.WpfViews.DLL
Microsoft.EnterpriseManagement.UI.ViewFramework
    Assembly Version: 7.1.1000.0
    Win32 Version: 7.1.3825.0
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.EnterpriseManagement.UI.ViewFramework.DLL
Microsoft.GeneratedCode
    Assembly Version: 1.0.0.0
    Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
System.Management
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Management/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Management.dll
AdminUI.WqlQueryEngine
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.WqlQueryEngine.DLL
AdminUI.WqlInitializer
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.WqlInitializer.DLL
Microsoft.GeneratedCode
    Assembly Version: 1.0.0.0
    Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
Microsoft.GeneratedCode
    Assembly Version: 1.0.0.0
    Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
AdminUI.CollectionMenuActions
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.CollectionMenuActions.DLL
Microsoft.GeneratedCode
    Assembly Version: 1.0.0.0
    Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
AdminUI.OSImage
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.OSImage.DLL
AdminUI.AssetIntelligence
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.AssetIntelligence.DLL
AdminUI.SoftwareMeteringRule
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SoftwareMeteringRule.DLL
AdminUI.DcmProperties
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.DcmProperties.DLL
AdminUI.UsmPolicy
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.UsmPolicy.DLL
AdminUI.ClientAgentSettings
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ClientAgentSettings.DLL
AdminUI.FirewallPolicy
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.FirewallPolicy.DLL
AdminUI.LegacySWD
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.LegacySWD.DLL
AdminUI.ConditionalDeliveryRule
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ConditionalDeliveryRule.DLL
AdminUI.VirtualEnvironment
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.VirtualEnvironment.DLL
AdminUI.SideloadKeys
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SideloadKeys.DLL
AdminUI.SoftwareUpdateProperties
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SoftwareUpdateProperties.DLL
AdminUI.Driver
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.Driver.DLL
AdminUI.DriverPackage
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.DriverPackage.DLL
AdminUI.Subscriptions
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.Subscriptions.DLL
AdminUI.Queries
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.Queries.DLL
AdminUI.SrsReporting
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SrsReporting.DLL
AdminUI.SiteHierarchyVisualization
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SiteHierarchyVisualization.DLL
AdminUI.SystemStatus
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SystemStatus.DLL
AdminUI.ClientOperation
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ClientOperation.DLL
AdminUI.ClientHealth
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ClientHealth.DLL
AdminUI.ContentMonitoring
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ContentMonitoring.DLL
AdminUI.AntiMalware
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.AntiMalware.DLL
AdminUI.CloudServiceRoles
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.CloudServiceRoles.DLL
AdminUI.SiteHierarchy
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SiteHierarchy.DLL
AdminUI.SiteBoundaries
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SiteBoundaries.DLL
AdminUI.ExchangeConnector
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ExchangeConnector.DLL
AdminUI.Addresses
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.Addresses.DLL
AdminUI.ActiveDirectory
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ActiveDirectory.DLL
AdminUI.AzureServices
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.AzureServices.DLL
AdminUI.RbacUser
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.RbacUser.DLL
AdminUI.RbacRole
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.RbacRole.DLL
AdminUI.RbacCategory
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.RbacCategory.DLL
AdminUI.Package
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.Package.DLL
AdminUI.Certificate
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.Certificate.DLL
AdminUI.SiteSystems
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.SiteSystems.DLL
AdminUI.HomePageView
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.HomePageView.DLL
Microsoft.EnterpriseManagement.UI.WpfViews.resources
    Assembly Version: 7.1.1000.0
    Win32 Version: 7.1.3825.0
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/en/Microsoft.EnterpriseManagement.UI.WpfViews.resources.DLL
Microsoft.GeneratedCode
    Assembly Version: 1.0.0.0
    Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
AdminUI.ViewCommon
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ViewCommon.DLL
Microsoft.GeneratedCode
    Assembly Version: 1.0.0.0
    Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
Microsoft.GeneratedCode
    Assembly Version: 1.0.0.0
    Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
AdminUI.AICustomizeCatalog
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.AICustomizeCatalog.DLL
AdminUI.AISoftwareProducts
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.AISoftwareProducts.DLL
AdminUI.ConsoleView
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ConsoleView.DLL
AdminUI.External.Controls
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.External.Controls.DLL
Microsoft.GeneratedCode
    Assembly Version: 1.0.0.0
    Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
System.Data
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.18046 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_32/System.Data/v4.0_4.0.0.0__b77a5c561934e089/System.Data.dll
System.Numerics
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Numerics/v4.0_4.0.0.0__b77a5c561934e089/System.Numerics.dll
PresentationFramework-SystemData
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.17929
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/PresentationFramework-SystemData/v4.0_4.0.0.0__b77a5c561934e089/PresentationFramework-SystemData.dll
Microsoft.ConfigurationManagement.DialogFramework
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/Microsoft.ConfigurationManagement.DialogFramework.DLL
Microsoft.GeneratedCode
    Assembly Version: 1.0.0.0
    Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
AdminUI.DialogFoundation
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.DialogFoundation.DLL
Accessibility
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.17929 built by: FX45RTMREL
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/Accessibility/v4.0_4.0.0.0__b03f5f7f11d50a3a/Accessibility.dll
AdminUI.DetailPanel
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.DetailPanel.DLL
AdminUI.FeaturesUtilities
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.FeaturesUtilities.DLL
Microsoft.GeneratedCode
    Assembly Version: 1.0.0.0
    Win32 Version: 4.0.30319.18058 built by: FX45RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
AdminUI.ConnectionAccount
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ConnectionAccount.DLL
System.Runtime.Caching
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.17929
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Runtime.Caching/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Runtime.Caching.dll
AdminUI.ConsoleRootActions
    Assembly Version: 5.0.0.0
    Win32 Version: 5.0.7804.1000
    CodeBase: file:///C:/Program%20Files%20(x86)/Microsoft%20Configuration%20Manager/AdminConsole/bin/AdminUI.ConsoleRootActions.DLL
************** JIT Debugging **************
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.
For example:
<configuration>
    <system.windows.forms jitDebugging="true" />
</configuration>
When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.
When I go and check the Endpoint Protection properties it gives me the following Error:
The SMS Provider reported and error
With the following Details:
ConfigMgr Error Object:
instance of SMS_ExtendedStatus
Description = "ERROR ON Property Convert";
ErrorCode = 0;
File = "e:\\nts_sccm_release\\sms\\siteserver\\sdk_provider\\smsprov\\sspsitesettingitem.h";
Line = 377;
Operation = "ExecQuery";
ParameterInfo = "SELECT * FROM SMS_SCI_ClientComp WHERE FileType=2 AND SiteCode='CCM' AND ItemName='Antimalware Agent' AND ItemType='Client Component'";
ProviderName = "WinMgmt";
StatusCode = 2147749917;
Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlQueryException
The SMS Provider reported an error.
Stack Trace:
   at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlQueryResultsObject.<GetEnumerator>d__0.MoveNext()
   at Microsoft.ConfigurationManagement.AdminConsole.SiteSystems.EndpointProtectionSpynetControl.InitializePageControl()
   at Microsoft.ConfigurationManagement.AdminConsole.SmsPropertyPage.OnInitialize()
System.Management.ManagementException
Unexpected error
Stack Trace:
   at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlQueryResultsObject.<GetEnumerator>d__0.MoveNext()
   at Microsoft.ConfigurationManagement.AdminConsole.SiteSystems.EndpointProtectionSpynetControl.InitializePageControl()
   at Microsoft.ConfigurationManagement.AdminConsole.SmsPropertyPage.OnInitialize()

Hi,
If you only add one file into the excluded files and locations, does this error still appear?
Could you reproduce this error on another system?
Best Regards,
Joyce Li
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Endpoint Protection Role fails after SCCM 2012 SP1 upgrade 0x8004ff84

We have been in the process upgrading our SCCM RTM to SP1 in order to get to R2 in the end. After upgrading the PRimary Site server to SP1 it seems the Endpoint protection update did not succeed. I removed the role and after that tried it to install again,
results below.
EPSetup.log
I<09/26/14 14:24:25> Installing the SMSEP
<09/26/14 14:24:25> Passed OS version check.
<09/26/14 14:24:25> File E:\BO\Microsoft Configuration Manager\Client\SCEPInstall.exe version is 4.4.304.0.
<09/26/14 14:24:25> EP version 2.2.903.0 is already installed.
<09/26/14 14:24:25> EP 2.2.903.0 is installed, version is lower than expected installer version 4.4.304.0.
<09/26/14 14:24:25> Invoking process "E:\BO\Microsoft Configuration Manager\Client\SCEPInstall.exe" /s /q /noreplace /policy "E:\BO\Microsoft Configuration Manager\Client\EP_DefaultPolicy.xml"
<09/26/14 14:24:25> CreateProcess: E:\BO\Microsoft Configuration Manager, "E:\BO\Microsoft Configuration Manager\Client\SCEPInstall.exe" /s /q /noreplace /policy "E:\BO\Microsoft Configuration Manager\Client\EP_DefaultPolicy.xml"
<09/26/14 14:25:00> CreateProcess: -2147156092
<09/26/14 14:25:01> SCEPInstall.exe returns 0x8004ff84
<09/26/14 14:25:01> SMSEP could not be installed. The return code was -2147156092
<09/26/14 14:25:02> ~RoleSetup().
When I manually try to run the SCEPInstall.exe setup asks for certain msi files it cannot find. Anyone seen this behaviour before? I'm not able to find information on this one.

It seems the uninstallation of the current SCEP client fails. It uses the new SCEPinstall.exe version to do the uninstall which fails. I copied the old version from another computer and used that to do the uninstall manually scepinstall.exe /u
It asks a few times for a location to find the msi files used to do the uninstallation. You have to point at a temporary map created at the drive root location. The Uninstall succeeds.
Now the Endpoint Protection role can be added again and will also succeed.

Help with Application for Endpoint Protection

I created an application to install System Center Endpoint Protection, because we are using Symantec Endpoint Protection 12.1.3, which is unsupported for SCEP to remove. With the application I set it to supersede our SEP 12.1 client and remove
any previous software. I created a previous thread, located here:
http://social.technet.microsoft.com/Forums/en-US/38a476b3-0e71-4e80-b348-81143fa5cefe/creating-an-application-for-sc-endpoint-protection?forum=configmanagergeneral.
The initial test works, our SEP is removed and SCEP is installed, however the client takes anywhere from 3-5 hours before SCEP pulls down the correct Anti-Malware policy and applies the latest definitions. The time frame for this is longer then
we want, rebooting the computer or going into the SCCM client and running the actions does not seem to speed up the process.
At the moment, the command that works is "scepinstall.exe" /s /q,
what I attempted to do was export the current anti-malware policy and run the command
"scepinstall.exe" /s /q /policy "Malware.xml", however this does not seem to work, in SCCM or running the command via a command prompt. The only way it would is if I fully defined the path the of the xml such
as, scepinstall.exe /s /q /policy C:\Windows\CCMCache\2\malware.xml, but this command does not work in SCCM, only via the command prompt. As well defining the policy doesn't seem to do anything, when I open SCEP, I cannot enter the history
or settings tab. Even if it did I could not guarantee that the path would remain constant.
It seems odd that it can take 3-5 hours before SCEP pulls down its policy, is this normal when installing without a defined policy?
Is there a setting that I need to change somewhere that is defining when the client can check in for a new Anti-malware policy? The SCCM client is checking the default time of 60 mins.
Is there a way to define the policy on the install any other way?
Is there something I am missing?

Hi,
I normally use a custom task sequence when swithing the antivirus, here is a great way of doing it solving the initial download of the definition updates as well from a package works great for OSD as well.
http://www.chrisnackers.com/2012/10/18/configuration-manager-2012-installing-endpoint-protection-during-a-task-sequence/
using the cache\2 is not a really good idea as it will not be same between computer, put the command line in a .cmd file and use the %~dp0 variable for current directory "scepinstall.exe /s /q /policy %~dp0EPAMPolicy2.xml" .
Regards,
Jörgen
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

Automatic Install of Endpoint Protection fails on windows 8.1 clients with SCCM 2012 R2

Running SCCM 2012 R2 and deploying CM clients and Endpoint Protection via software updates. CM client and EP install fine on Windows 7 clients. CM client installs fine but endpoint protection fails on Windows 8.1 clients with the following from the
endpoint protection agent log:
<![LOG[Create Process Command line: "C:\Windows\ccmsetup\SCEPInstall.exe" /s /q /policy "C:\Windows\CCM\EPAMPolicy.xml".]LOG]!><time="12:22:02.560+240" date="08-13-2014" component="EndpointProtectionAgent"
context="" type="1" thread="4260" file="epagentutil.cpp:607">
<![LOG[Detail error message is : [EppSetupResult]
HRESULT=0x80070643
Description=Cannot complete the System Center Endpoint Protection installation. An error has prevented the System Center Endpoint Protection setup wizard from completing successfully. Please restart your computer and try again. Error code:0x80070643. Fatal
error during installation.
So on the win8.1 client I run the above command line manually in a command window and receive Access is denied. Then I run the same command in an elevated command window and EP installs fine. Does this have something to do with why the automatic
EP client install fails with the 0x80070643 error code? If so, what is the fix?

Hi,
Try uninstalling any other security software.
For more information, please review the link below:
I‘m getting an error code from my Microsoft security software
http://www.microsoft.com/security/portal/mmpc/help/errorcodes.aspx
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

How to Write Path to Exclude Specific Folder From Scanning in Endpoint Antimalware policy

Dears,
I have configured endpoint protection antimalware policy to make scanning windows servers, and I have some specific folders which I need excluded from scanning because of they are critical folders, so, when I wants to excluded the folder, how do I write
the path to add the path to excluded filed? is this correct path
C:\MyFolder or there is s special path writing?
Thanks..

If that's the folder you want to exclude then your doing fine. For more information see (List of Antimalware Policy Settings):
http://technet.microsoft.com/en-us/library/hh508785.aspx
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Endpoint Protection Managed Workstations: Antimalware policy application failed

Similar Messages

Maybe you are looking for