SCCM Deployment of update to Windows host fails, application is routed to basic sandbox

Products

• Data Center Security Server Advanced

Issue/Introduction

You are using a DCS IPS Policy with the Basic Prevention Parameters and updates via SCCM are failing on the Windows Machine.

Environment

DCS 6.9.x
DCS 6.10.x

Resolution

The Basic strategy provides protection for the operating system and a set of common applications. This strategy confines the remaining applications (both services and interactive programs) within the Basic sandbox. The Basic sandbox is set up to be highly compatible for programs running within it.

The Basic strategy does not allow applications to install software. In the Basic strategy, you must explicitly identify your Trusted Updaters.

To resolve this issue, add the SCCM application to trusted updaters for the specific .exe by it's full path to trusted updaters list in the IPS policy.