Cannot edit HOSTS file

[BorisL]

Harmony Endpoint Antimalware 86.10 wrongly detects a computer administrator attempting to change the HOSTS file and blocks the change.

Is there a way to bypass this?

[G_W_Albrecht]

The user/admin has  to shutdown EPS locally before the change.

[BorisL]

First. Not possible to give local admins that possibility. What's the purpose of the uninstall password, then? It's like telling someone: "remove your antivirus, then reinstall it" If that is the solution, then we would have to look for another product.

Second. It does not happen in all systems. In 2 out of 3 Windows 10 computers with the Endpoint active, local admin can change HOSTS. 

[G_W_Albrecht]

Contact TAC to get this resolved ! Looks like a bug. I did not mean to uninstall, only shutdown client...

[BorisL]

Thank you for the interest and help.

But I just spent almost 3 months with TAC on a bug in Harmony Endpoint which wrongfully locked files (finally solved last week). I am not willing to go through that ordeal (tests, zooms, more tests, files back and forth) again... 

[Chris_Atkinson]

You could pilot E86.25 on one of the machines, else if there is a specific protection being triggered there might be other workarounds available....

[jcortez]

@BorisL 

It does sound like an issue that needs to be looked at by our Endpoint Tac Teams. This is our process and if it needs a fix, this is the only path.

If you continue to see issues with our client either try our latest version, E86.25, to see if that resolves it or create a SR.

[BorisL]

Fix for other problem was applied to 86.10.69 and we were told to upgrade to 86.30 when available. So, maybe, 86.25 will fix one thing and break another one.