Protection off in build 32010
In the latest build, if protection is off the Protection Overview page in the UI now only shows that protection is stopped permanently with just one button to turn it on. I like this, but what I don't like is that it still wants to check for updates every five minutes. If protection is off, why can't it stop this incessant task and just check when and if the user turns protection back on?
Steve, that was never a viable option because the scheduled task would run anyway regardless of that setting. I suspect what it was doing was checking to see if there was an update, but just not downloading it.
My recollection is that even if the option was not checked, sometimes you would still see a message that there was an available update.
Bruno, I have never seen any indication of updates being checked for when I have had Protection turned off, which has been the case until I installed the new #32010 update today and turned protection on for the first time to confirm that my Support Case was actually resolved! (Protection was turning itself off again automatically after a couple of seconds on #30480)
I will try to keep an eye on if this has changed since this new update and change of Protection to being turned on.
Steve, there is no obvious indication in the UI. I could see it by looking at the Schedule2 logs where you see the same task being started every 5 minutes on the 0s and 5s. Also, check the Schedule Manager for the internal task that checks for updates and has a time interval of 300 (seconds). Look at its last run time and see how it still runs.
What I have done is a double shot approach. I set the time interval to 14400 to run every four hours instead of every five minutes. And then I set enabled to OFF so it won't run at all.
The thing that makes this not a great solution is that if you turn on protection it will recreate the internal task again.
In ATI 2018 topic here: Ekaterina wrote:
The services active_protection_service.exe and cyber-protect-service.exe specifically are always installed together with the agent. We do have an incoming feature request to exclude Antimalware components from being installed (internal ID for reference RM-1409 Allow Agent installation without Antimalware components). I've added your feedback as a vote for this change, thank you!
I have asked for my vote to be added to this incoming feature request too!
Steve Smith wrote:In ATI 2018 topic here: Ekaterina wrote:
The services active_protection_service.exe and cyber-protect-service.exe specifically are always installed together with the agent. We do have an incoming feature request to exclude Antimalware components from being installed (internal ID for reference RM-1409 Allow Agent installation without Antimalware components). I've added your feedback as a vote for this change, thank you!
I have asked for my vote to be added to this incoming feature request too!
+1 for me.
I would also like to add that not installing the components is one thing, but if they are installed and protection is turned off it should have the same net effect... none of this stuff running.
BrunoC wrote:Steve Smith wrote:In ATI 2018 topic here: Ekaterina wrote:
The services active_protection_service.exe and cyber-protect-service.exe specifically are always installed together with the agent. We do have an incoming feature request to exclude Antimalware components from being installed (internal ID for reference RM-1409 Allow Agent installation without Antimalware components). I've added your feedback as a vote for this change, thank you!
I have asked for my vote to be added to this incoming feature request too!
+1 for me.
I would also like to add that not installing the components is one thing, but if they are installed and protection is turned off it should have the same net effect... none of this stuff running.
+ 1