The Microsoft Network Inspection service started by System Center 2012 Configuration Manager may be stopped by Active Directory Group Policy

Article translations Article translations
Article ID: 2688238 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

Consider the following scenario:
  • A Microsoft System Center 2012 Configuration Manager administrator sets the Enable protection against network-based exploits option to True and then deploys the policy to a collection of devices. This option is part of the Real-time protection item on the Antimalware tab for the Microsoft Forefront Endpoint Protection (FEP) policies in the Configuration Manager console.
  • Then, the Configuration Manager client sets the start of the Microsoft Network Inspection service to Automatic on all devices in the target collection.
  • An Active Directory administrator configures Group Policy to set the start for the Microsoft Network Inspection service to Disabled.

In this scenario, when the Group Policy settings are applied, the Microsoft Network Inspection service is stopped, and the start of the service is set to Disabled. When the Configuration Manager client evaluates Client Health and determines that the service is disabled, it remediates the problem by setting the start of the service to Automatic and starts the service again. However, the service soon stops again because the service is stopped by the Active Directory Group Policy.

STATUS

This behavior is by design. Group Policy settings to disable services should be carefully evaluated together with the Configuration Manager group or the System Center 2012 Endpoint Protection group to make sure that these settings do not disable services that are required for required functionality.

Properties

Article ID: 2688238 - Last Review: July 9, 2012 - Revision: 2.0
APPLIES TO
  • Microsoft System Center 2012 Configuration Manager
Keywords: 
kbtshoot kbprb kbexpertiseinter kbsurveynew KB2688238

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com