topic Re: Weird endpoint behaivior in Endpoint

Weird endpoint behaivior

CP-Shark — Wed, 26 Nov 2025 10:56:26 GMT

Hello everyone,

I’ve found some weird behavior on our assets using a specific software (let's call it application.exe).

When a user tries to access application.exe, which is excluded in the policy assigned to the asset, it opens a prompt requesting a username and password (higher privileges).

I have tried disabling all endpoint capabilities, but the behavior remains the same. However, here is the strange part: Uninstalling the endpoint agent solves the problem, and it stays fixed even after I reinstall the agent.

I am looking for ideas on how to troubleshoot this further. How can I verify if this is a configuration drift or corruption issue rather than a direct defect in the endpoint software?

Version is E88.72 or E89.05

Cheers,
Oliver

Re: Weird endpoint behaivior

the_rock — Wed, 26 Nov 2025 12:46:27 GMT

Might be worth opening TAC case Oliver.

Re: Weird endpoint behaivior

lluner — Wed, 26 Nov 2025 16:32:17 GMT

@CP-Shark

He tried to repair the "push operation".

Re: Weird endpoint behaivior

the_rock — Wed, 26 Nov 2025 16:45:51 GMT

Definitely worth a try.

Re: Weird endpoint behaivior

CP-Shark — Wed, 26 Nov 2025 17:00:45 GMT

Tried it and no success

Re: Weird endpoint behaivior

the_rock — Wed, 26 Nov 2025 17:01:21 GMT

Definitely open TAC case @CP-Shark

Re: Weird endpoint behaivior

lluner — Wed, 26 Nov 2025 17:17:18 GMT

@CP-Shark

You removed the endpoint and the application still works?