{"id":130,"date":"2013-09-19T08:58:20","date_gmt":"2013-09-19T08:58:20","guid":{"rendered":"https:\/\/teacheritblog.wordpress.com\/?p=130"},"modified":"2013-09-19T08:58:20","modified_gmt":"2013-09-19T08:58:20","slug":"sccm-scep-suspend-sccm2012-sp1-endpoint-protection-sysctr","status":"publish","type":"post","link":"https:\/\/christianlehrer.com\/?p=130","title":{"rendered":"#SCCM #SCEP Suspend SCCM2012 SP1 Endpoint Protection #SysCtr"},"content":{"rendered":"
<\/div>

If you ever come into a situation where you need to stop the running System Center Endpoint Protection 2012 SP1,  you will find out that there is no way to stop the service. Neither in the GUI nor the service Microsoft Antimalware Service (MsMpEng.exe) itself.<\/p>\n

After searching a while I found the solution in this thread<\/a>:<\/p>\n

You need two tools, which will help you (not only in this case!): psexec<\/a> and Process Explorer<\/a>.<\/p>\n

Copy both tools to a folder on the system and start an elevated<\/strong> command promt.<\/p>\n

1. Run the command: <\/p>\n

\n

%yourpath%psexec.exe \u2013s \u2013i %yourpath%procexp.exe  *<\/font><\/p>\n<\/blockquote>\n

\"Capture1\"<\/a><\/p>\n

*where %yourpath% is the path you saved the tools in<\/p>\n

2. After accepting two EULAs (only for the first time) Process Explorer will show up. Search for a process called \u201cMsMpEng.exe\u201d and double click it. Switch to the \u201cservices\u201d tab.<\/p>\n

\"Capture2\"<\/a><\/p>\n

3. Click on \u201cPermissions\u201d and give Full Control rights to the Administrators group.<\/p>\n

\"Capture3\"<\/a><\/p>\n

After OKing every window you can open or refresh your services.mmc and you will be able to stop the Microsoft Antimalware Service.<\/p>\n

\"Capture4\"<\/a><\/p>\n

 <\/p>\n

As soon as you start the service again, the permissions will be set back to the original settings.<\/strong><\/p>\n

Christian<\/p>\n","protected":false},"excerpt":{"rendered":"

If you ever come into a situation where you need to stop the running System Center Endpoint Protection 2012 SP1,  you will find out that there is no way to stop the service. Neither in the GUI nor the service Microsoft Antimalware Service (MsMpEng.exe) itself. After searching a while I found the solution in this…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[21],"tags":[91,93],"_links":{"self":[{"href":"https:\/\/christianlehrer.com\/index.php?rest_route=\/wp\/v2\/posts\/130"}],"collection":[{"href":"https:\/\/christianlehrer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/christianlehrer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/christianlehrer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/christianlehrer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=130"}],"version-history":[{"count":0,"href":"https:\/\/christianlehrer.com\/index.php?rest_route=\/wp\/v2\/posts\/130\/revisions"}],"wp:attachment":[{"href":"https:\/\/christianlehrer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=130"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/christianlehrer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=130"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/christianlehrer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=130"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}