Summary
Starting from OfficeScan 10.6 Service Pack 3 (SP3), it has a new functionality wherein the Scheduled Scan cannot execute after its postponed time if there is a running full-screen application such as Power Point.
Upon checking the ofcdebug.log, it shows the following:
2014 07/29 14:00:14 [17b0 : 0edc] (00) [-IO-][PccNTMon.exe]IPCRcvCallback - detect full screen mode and it is not screen saver mode!! - [cntm_PccNTMon.cpp(3215)]
Details
To prevent the Scheduled Scan pop-up from displaying, you can disable the new functionality either on global or on individual OSCE client.
Globally disabling the feature
Below are the two options to deactivate this function globally.
- Manually modify the ofcscan.ini file.
- Open the ofcscan.ini under <OSCE server>\PCCSRV\.
- Add following line under [Global Settings]. If the line exists, just modify its value.
AutoDelayScanForFullScreen=0
- Save the ofcscan.ini file.
- From the OfficeScan Management console, go to the Global Client Setting Page.
- Click Save.
- On the OfficeScan Management console, navigate to Scheduled Scan Privileges and disable the Postpone Scheduled Scan.
Disabling the feature on individual OfficeScan clients
- Deploy the "AutoDelayScanForFullScreen=1" set in the OSCE Server ofcscan.ini. All the clients have the registry set to 1.
- Remove the key "AutoDelayScanForFullScreen" in the Global Settings, and then deploy again. All the client should get the ini file with no AutoDelayScanForFullScreen value.
Note: This process needs time to confirm that most of the clients, especially the offline clients and clients on larger environment, already got the deployed key.
- On specific client machine, directly turn off the key in the registry.
- Open the Registry Editor.
Important: Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
- Navigate to one of the following:
X86: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Prescheduled Scan Configuration
X64: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\ Prescheduled Scan Configuration - Modify the following value:
AutoDelayScanForFullScreen=0
- Open the Registry Editor.
