locked
Checkpoint ID: 7, Error description: Access is denied. RRS feed

  • Question

  • I've scheduled a daily scan at 2:00AM and this PC comes back with this error every morning.
    In the event viewer I do get the start and finish events??

    Microsoft Forefront Client Security scan has started.
      Scan ID: {5D78522B-8DBF-4DF0-8A67-078C8F6CB105}
      Scan Type: AntiMalware
      Scan Parameters: Full Scan
      User: NT AUTHORITY\SYSTEM

    Microsoft Forefront Client Security scan has finished.
      Scan ID: {5D78522B-8DBF-4DF0-8A67-078C8F6CB105}
      Scan Type: AntiMalware
      Scan Parameters: Full Scan
      User: NT AUTHORITY\SYSTEM
      Scan Time: 0:44:42

    Microsoft Forefront Client Security Real-Time Protection checkpoint has encountered an error and failed.
      User: Removed
      Checkpoint ID: 7
      Error Code: 0x80070005
      Error description: Access is denied.

    The user is member of the local admin group and also domain admins since she is an administrator.

    Any clue?

    Monday, December 8, 2008 5:36 PM

All replies

  • Anyone? Every morning I get the same alert.

    What's a Checkpoint 7 ??
    Wednesday, December 10, 2008 3:06 PM
  • Not sure :) I haven't seen this one before.  Try downloading a copy of Process Monitor and capturing a log when you know this will happen and then filter for results that have the word "denied" in them to see if there are possibly some reg or file acl's that may be causing an issue on this system specifically.


    CSS Security Support Engineer (FCS/MBSA/WUA/Incident Response) Check out my blog http://blogs.technet.com/kfalde
    Tuesday, December 16, 2008 3:31 PM
  • Ok, I'll give this a try and post here with results.

    Thanks
    Tuesday, December 16, 2008 3:36 PM