Changes made in the Symantec Mail Security for Microsoft Exchange (SMSMSE) administration console do not take effect in email processing when Windows server 2008 User Account Control (UAC) virtualization is enabled
Last Updated May 18, 2016
A policy change is made in the SMSMSE Administration console. However the other SMSMSE components do not read the change and take the appropriate actions.
The following are examples:
A new content filtering rule is configured. However mail is not blocked.
Premium AntiSpam is enabled. However SPAM is not blocked.
Changing a content filtering/file scanning rule from Quarantine to Log Only. However email is still quarantined.
User Account Control Virtualization is enabled.
1. Open the Local Security Policy MMC. 2. Click on Local Policies|Security Options. 3. If User Account Control: Virtualize file and registry write failures to per-user locations is Enabled then this condition is met.
Microsoft procmon log shows that writes to the SMSMSE directories are redirected to per-user locations.
1. The process monitor log shows the file C:\Program Files (x86)\Symantec\SMSMSE\7.5\Server\SpamPrevention\AntiSpamActions2007.xml being opened for read/write access however it is redirected to C:\Users\johndoe\AppData\Local\VirtualStore\Program Files (x86)\Symantec\SMSMSE\7.5\Server\SpamPrevention\AntiSpamActions2007.xml:
The SMSMSE Administration console is being affected by UAC virtualization. All changes made to files on the file system are written to the virtualized file system rather than the "real" location.
The other SMSMSE services are not affected by the UAC virtualization. They read the settings from the "real" location. Since these settings files are not updated no changes take effect.
Configure the SMSMSE Administration Console to run always as administrator:
1. Right click the console icon and choose Properties. 2. Click the Open File Location button. 3. Right click the file Symantec.Cmaf.UI.exe and click Properties 4. On the Compatibility tab check Run this program as an administrator 5. Click Ok.
Imported Document ID: TECH165468
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe