karsayor 8 Posted October 19, 2018 Share Posted October 19, 2018 Does anyone encounters issue with SQL Server Native Client 11.0 after update to 7.0 of File Security ? I get the attached error every 30 minutes, and it was not present with 6.5. After I uninstalled EFSW 7.0 I can confirm the issue is gone. Any idea ? Link to comment Share on other sites More sharing options...
Administrators Marcos 4,935 Posted October 19, 2018 Administrators Share Posted October 19, 2018 Does any of the following make a difference? - disabling real-time protection and rebooting the machine - disabling HIPS and rebooting the machine - disabling protocol filtering Link to comment Share on other sites More sharing options...
karsayor 8 Posted October 19, 2018 Author Share Posted October 19, 2018 (edited) Disabling HIPS seems to do the trick, no more messages after the reboot. How can we fix this ? Edited October 19, 2018 by karsayor Link to comment Share on other sites More sharing options...
Command IT 7 Posted October 20, 2018 Share Posted October 20, 2018 We found we stopped having the logs after running a repair of the SQL Server Native Client 11.0 John Link to comment Share on other sites More sharing options...
karsayor 8 Posted October 20, 2018 Author Share Posted October 20, 2018 I tried this as well but the issue happens again after a reboot I think. Only way is disabling HIPS or uninstalling native client also, it only happens on server 2016, not isolated issue it happens on all of them with native client. 2012R2 doesn’t seems to be affected. Link to comment Share on other sites More sharing options...
Administrators Marcos 4,935 Posted October 23, 2018 Administrators Share Posted October 23, 2018 Does it make a difference if you keep HIPS enabled and temporarily disable only Self-defense (followed by a reboot)? Also please provide a debug HIPS log that you create as follows: - have HIPS and Self-defense enabled (after re-enabling either, the machine has to be restarted) - enable logging of blocked operations in the advanced HIPS setup - reproduce the problem - disable logging Gather logs with ELC and post the generated archive here. Link to comment Share on other sites More sharing options...
karsayor 8 Posted October 24, 2018 Author Share Posted October 24, 2018 On 10/23/2018 at 1:23 PM, Marcos said: Does it make a difference if you keep HIPS enabled and temporarily disable only Self-defense (followed by a reboot)? Also please provide a debug HIPS log that you create as follows: - have HIPS and Self-defense enabled (after re-enabling either, the machine has to be restarted) - enable logging of blocked operations in the advanced HIPS setup - reproduce the problem - disable logging Gather logs with ESET Log Collector and post the generated archive here. Yes, disabling only self-defense is enough to fix the issue. Unfortunately, there are no logs in the HIPS event log at the same time of the event, still I collected the logs as requested. I send them via PM. Link to comment Share on other sites More sharing options...
karsayor 8 Posted October 30, 2018 Author Share Posted October 30, 2018 hi Marcos, Do you know if the issue can be fixed ? Thanks Link to comment Share on other sites More sharing options...
Asa Engleman 0 Posted November 27, 2018 Share Posted November 27, 2018 (edited) Hi. We worked with support on this and had this excellent response to the issue: Update for Case #207376 - "SQL Error with EFS" Edited December 18, 2018 by Marcos Email content removed. The text is a verbatim copy of developer's reponse. Link to comment Share on other sites More sharing options...
karsayor 8 Posted December 18, 2018 Author Share Posted December 18, 2018 Hello I still have the issue. Am I alone ? Link to comment Share on other sites More sharing options...
Administrators Marcos 4,935 Posted December 18, 2018 Administrators Share Posted December 18, 2018 Please refer to https://forum.eset.com/topic/17542-efs-70120140-mssql-error/: After applying the SQL Server 2014 Service Pack 3 (KB4022619) the problem is gone i.e. FIXED Link to comment Share on other sites More sharing options...
Recommended Posts