ISE 2.3 launch program remediation error

[Madura Malwatte]

ISE 2.3 patch 5

I have a launch program remediation configured which specifies a system_32 installation path to run a vbs script. The script just tells SCCM to push down an Anti-Malware software. However when remediating it fails with the following error below.

Am I using the right method to run a vbs script as remediation?

[howon]

If file name is correct, the AnyConnect DART bundle should provide hints on what the issue may be. Suggest going through the flow and collect DART and look at the posture module logs for more information.

[Madura Malwatte · Accepted solution]

Ok so it seems ISE doesn't like launch program remediation where if the application is in c:\windows\system32 folder and if you configure ABSOLUTE option and put the full path in for program executable and program parameters it doesn't work. 

I switched it to SYSTEM32 option and put in the program executable and parameters as just the file name without the path and it works.

Not sure if this is expected behaviour?

Note: My application and parameters file is in the c:\windows\system32 folder.

Oh and the aciseposture log file in dart bundle is encrypted, is there a way for us to decrypt it?

[hslai]

Please open a TAC case and submit the DART file to TAC. TAC has a tool to decipher the aciseposture log file.