topic Re: Checkpoint - TrGUI.exe runs in the name of System - systray icon missing in SASE and Remote Access

Checkpoint - TrGUI.exe runs in the name of System - systray icon missing

kovacsocsi — Wed, 26 Apr 2023 07:51:23 GMT

Hi,

a couple of weeks ago we turned on the Secure Domain Logon option on all of the previously installed clients.
We used this method: trac.exe sdl -st enable

Since there we have a strange issue, which happens randomly, on random clients.
User turns the notebook on, logs in with windows credentials but without SDL. After the logon procedure the Checkpoint icon is missing from the systray.

We checked the Task Manager, and the TrGui.exe is runs in the name of the SYSTEM, not in the name of the user.
We also checked, that this process belongs to ccmexec (SCCM). So somehow the SCCM (SMS Agent Host) starts the TrGUI.exe, and it runs in the background, that is why the TrGUI cannot started in the name of the user.

Checkpoint client version is 87.10.

Re: Checkpoint - TrGUI.exe runs in the name of System - systray icon missing

Valentin1 — Thu, 27 Apr 2023 09:04:31 GMT

Could you find out if there were any RDP connections before this

Re: Checkpoint - TrGUI.exe runs in the name of System - systray icon missing

kovacsocsi — Thu, 27 Apr 2023 09:47:17 GMT

No RDP connection before this.
New information, that it happens with 87.00 , 87.10, 87.20 but not with 86.80.

Re: Checkpoint - TrGUI.exe runs in the name of System - systray icon missing

PhoneBoy — Thu, 27 Apr 2023 19:54:42 GMT

Please open a TAC case so we can investigate: https://help.checkpoint.com