Trend Vision One™ Server & Workload Protection agent self-protection policy restricts the deployment script from assigning new policies

Product / Version includes:

Trend Vision One Endpoint Security

Last updated: 2025/03/05

Solution ID: KA-0019198

Category:

Summary

When assigning a policy to a Trend Vision One Server & Workload Protection endpoint using the Trend Vision One Deployment Script, users should avoid using policies that enable agent self-protection with agent-initiated activation. This can result in endpoints adopting an unexpected policy since both the deployment script and agent-initiated activation assign policies to endpoints.
When deploying the endpoint using the deployment script, agent-initiated activation triggers first and assigns the policy with agent self-protection enabled to the endpoint. This causes the subsequent attempt by the deployment script to assign another policy to fail due to the agent self-protection mechanism.

Component Reference:

Trend Vision One Deployment Script
Refer to the Online Help Center article, Using the Deployment Script.

The deployment script downloads the corresponding Trend Vision One installer on the endpoint where it is executed. After installation, the script assigns the specified policy to the endpoint.
Server & Workload Protection Agent-Initiated Activation
Refer to the Online Help Center article, Activate and protect agents using agent-initiated activation and communication.

Agent-initiated activation allows endpoints to initiate communication and assigns a specific policy during the first connection.
Server & Workload Protection Agent Self-Protection
Refer to the Online Help Center article, Enable or disable agent self-protection.

When agent self-protection is enabled, it prevents local users from making any changes to the endpoint. The Deployment script is executed with local user permissions.

Was this article helpful?

Featured

Automation Center

Education Portal

Online Help Center

Service Status

TrendConnect

Trend Vision One™ Server & Workload Protection agent self-protection policy restricts the deployment script from assigning new policies

Component Reference:

Trend Vision One™ Server & Workload Protection agent self-protection policy restricts the deployment script from assigning new policies

Product / Version includes:

Summary

Component Reference: