Workstation hangs or crashes after installing DLP Endpoint Agent

Products

• Data Loss Prevention Endpoint Prevent

Cause

The Windows User Access Control (UAC) level was elevated, but the CUI.exe and CUIL.exe were not included to recieve the elevated privileges. When the DLP edpa.exe service tried to launch CUI.exe or CUIL.exe, they're blocked by UAC. DLP is stuck in a loop constantly trying to restart the services.

Resolution

Elevate the privileges for both CUI.exe and CUIL.exe so they're able to run without additional UAC permissions.

One way to do this is to create Environment Variable "_COMPAT_LAYER=RunAsInvoker" on the affected workstation. NOTE: This environment variable is not restricted to just the DLP services.