04-27-2021 11:58 PM
Hello,
am new to the tool, am trying to find out which Engine from Cisco AMP is blocking the powershell.exe. we have a .vbs script which runs on every start up to set some printer preferences, which is failing obviously due to AMP and user could see an error every time he/she login. when i checked, its not only the script but poweshell.exe it self is blocked. and no specific error pointing to AMP in any logs. but all works well if stop the AMP service.
all I can see an error in windows logs "Faulting application name: conhost.exe, version: 10.0.19041.746"
Please suggest how i can dig in more or fix this.
Thank you,
NG