To resolve the issue:

1. Open the ..\PCCSRV\ofcscan.ini file using a text editor like Notepad.
2. Under the [Global Setting] section, add the following parameters:
   • Exceptions for "normal" Cobra user:
     [Global Setting]
     SEG_WhiteListProc0=SchedulerUI.exe
     SEG_WhiteListProc1=AdressPLUS.exe
     SEG_WhiteListProc2=SerialMailerTray.exe
   • Exceptions for Cobra Administration:
     [Global Setting]
     SEG_WhiteListProc0=SchedulerUI.exe
     SEG_WhiteListProc1=AdressPLUS.exe
     SEG_WhiteListProc2=SerialMailerTray.exe
     SEG_WhiteListProc3=ActiveDirAssistent.exe
     SEG_WhiteListProc4=BackupWizard.exe
     SEG_WhiteListProc5=cobraProtocolParser.exe
     SEG_WhiteListProc6=ErpScheduler.exe
     SEG_WhiteListProc7=OutlookSynchronizer.ex
     SEG_WhiteListProc8=ReplicationRemover.exe
     SEG_WhiteListProc9=SqlServerTool.exe
     SEG_WhiteListProc10=Synchronize.exe
3. Save and close the file.
4. Log in to the WFBS console.
5. Go to Preferences > Global Settings and then click the desktop or server.
6. Click Save to deploy the settings to the clients.
   You will see the following registry keys after deploying the settings to the agent:

   • For "normal" Cobra user:

     • [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Osprey\WhiteList\Cobra-1]
       "ProcessImageName"="SchedulerUI.exe"
     • [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Osprey\WhiteList\Cobra-2]
       "ProcessImageName"="AdressPLUS.exe"
     • [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Osprey\WhiteList\Cobra-9]
       "ProcessImageName"="SerialMailerTray.exe"
   • For Cobra Administration:
     • [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Osprey\WhiteList\Cobra-3]
       "ProcessImageName"="ActiveDirAssistent.exe"
     • [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Osprey\WhiteList\Cobra-4]
       "ProcessImageName"="BackupWizard.exe"
     • [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Osprey\WhiteList\Cobra-5]
       "ProcessImageName"="cobraProtocolParser.exe"
     • [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Osprey\WhiteList\Cobra-6]
       "ProcessImageName"="ErpScheduler.exe"
     • [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Osprey\WhiteList\Cobra-7]
       "ProcessImageName"="OutlookSynchronizer.exe"
     • [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Osprey\WhiteList\Cobra-8]
       "ProcessImageName"="ReplicationRemover.exe"
     • [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Osprey\WhiteList\Cobra-9]
       "ProcessImageName"="SerialMailerTray.exe"
     • [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Osprey\WhiteList\Cobra-10]
       "ProcessImageName"="SqlServerTool.exe"
     • [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Osprey\WhiteList\Cobra-11]
       "ProcessImageName"="Synchronize.exe" => Mobile User
     • [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Osprey\WhiteList\Cobra-12]
       "ProcessImageName"="SystemADLVerifier.exe"
     • [HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\Osprey\WhiteList\Cobra-13]
       "ProcessImageName"="ViewEditor.exe"

If the issue persist, add Cobra as a Trusted Program:

1. Go to the WFBS Dashboard.
2. Click Security Settings and select the group of desktop or servers.
3. Click Configure > Trusted Program.