cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2321
Views
0
Helpful
1
Replies

AMP User Interface shows"Service stopped"when multiple users are login

Eng.Ameen
Level 1
Level 1
Hi,

I have a FireAMP Connector installed on a server with windows operating system. 

When the first user logs in the tray agent looks good, green check mark, connected. But when the second user logs in the tray agent displays the error: "Status: Service stopped", but the service is running and the first user is still seeing a green check mark. So this looks like a communication problem between the tray agent and the service in case of multiple users logged in at the same time. I checked this in my lab and it behaves exactly the same, also the schedule scan process stopped and unfortunately failed with return error "Maximum consecutive unclean shutdowns exceeded". 

Is there some special setting one would need to run AMP on a terminal server?

The only workaround I can think of is to login with first user and start the scan manually, but that's not really a solution.

Thank you 

1 Reply 1

Troja007
Cisco Employee
Cisco Employee

Hello @Eng.Ameen ,
today the sfc.exe process allows a single tray icon connection. Therefore, for the first logged in user the tray icon works, but not for any other user. This is made by design. We recommend to hide the tray icon using the policy in multi-user environments.
Greetings,
Thorsten