konradk 0 Posted April 29, 2021 Share Posted April 29, 2021 Until a year ago, I had been using a trial version of ESET Internet Security without any problems. Then I bought a licence for a different antivirus software. Now that it's expired, I decided to buy a licence for ESET. And it's working fine, except for the fact that I can't add or edit rules. It says that there was an error while saving and to make sure I have privileges to change settings. I have no idea what's wrong and how to fix it. Link to comment Share on other sites More sharing options...
itman 1,739 Posted April 29, 2021 Share Posted April 29, 2021 Are you logged on to Windows under a standard user account? Link to comment Share on other sites More sharing options...
konradk 0 Posted April 29, 2021 Author Share Posted April 29, 2021 No, it's an administrator account. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,228 Posted April 29, 2021 Administrators Share Posted April 29, 2021 Are you able to change other settings and cannot save only firewall rules? What OS do you have? Do you have UAC enabled? Link to comment Share on other sites More sharing options...
konradk 0 Posted April 29, 2021 Author Share Posted April 29, 2021 (edited) It would appear so, but I didn't check all settings. Win 7 64bit Ultimate. UAC disabled. Edited April 29, 2021 by konradk Link to comment Share on other sites More sharing options...
Administrators Marcos 5,228 Posted April 29, 2021 Administrators Share Posted April 29, 2021 Please re-enable UAC and see if that helps. Link to comment Share on other sites More sharing options...
konradk 0 Posted April 29, 2021 Author Share Posted April 29, 2021 Didn't help. Link to comment Share on other sites More sharing options...
itman 1,739 Posted April 29, 2021 Share Posted April 29, 2021 As a test, create a HIPS rule; you can delete it afterwards. Is the rule created and saved w/o issue? Link to comment Share on other sites More sharing options...
konradk 0 Posted April 29, 2021 Author Share Posted April 29, 2021 Yeah, it was created without a problem. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,228 Posted April 29, 2021 Administrators Share Posted April 29, 2021 Please provide a Procmon log from time when you attempt to save a firewall rule. Have you tried uninstalling ESET and installing it from scratch? Link to comment Share on other sites More sharing options...
konradk 0 Posted April 29, 2021 Author Share Posted April 29, 2021 Both the process and the boot log files? Yeah, I tried that 3 times. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,228 Posted April 29, 2021 Administrators Share Posted April 29, 2021 1, Start logging with Procmon 2, Attempt to save a firewall rule 3, Stop logging 3, Save the log, compress it and upload it here. Link to comment Share on other sites More sharing options...
konradk 0 Posted April 29, 2021 Author Share Posted April 29, 2021 I was asking if I'm supposed to create both logs that are mentioned there. But that tells me the process log is enough. So, here it is Logfile.zip Link to comment Share on other sites More sharing options...
Administrators Marcos 5,228 Posted April 29, 2021 Administrators Share Posted April 29, 2021 Please check if the Administrators group and System account have full control granted for C:\ProgramData\ESET\ESET Security. Link to comment Share on other sites More sharing options...
konradk 0 Posted April 29, 2021 Author Share Posted April 29, 2021 I don't know how to check that, but I can't access the ESET folder. I'm getting the "You don’t currently have permission to access this folder" error. So, I guess I don't have full control. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,228 Posted April 29, 2021 Administrators Share Posted April 29, 2021 Please run: icacls C:\ProgramData and provide the output of the command. Link to comment Share on other sites More sharing options...
konradk 0 Posted April 29, 2021 Author Share Posted April 29, 2021 "C:\ProgramData Everyone:(F)" "Successfully processed 1 files; Failed processing: 0 files" Btw, the original output was in Polish, but from what I googled it's how it should read in English. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,228 Posted April 30, 2021 Administrators Share Posted April 30, 2021 Please uninstall ESET temporarily and make sure that the folder C:\ProgramData\ESET\ESET Security doesn't exist. If exists, are you able to delete it? Are you able to create it manually and create and write to files in that folder? For an unknown reason ekrn was getting access denied when attempting to save rules there. Link to comment Share on other sites More sharing options...
konradk 0 Posted April 30, 2021 Author Share Posted April 30, 2021 (edited) It didn't exist. I was able to create it and write files into it. But I think I solved the problem. I played with permission settings on the security tab of the ESET folder. I don't know if I should've done that in the first place, but it seems to have helped. Edited April 30, 2021 by konradk Link to comment Share on other sites More sharing options...
itman 1,739 Posted April 30, 2021 Share Posted April 30, 2021 2 hours ago, konradk said: It didn't exist. I was able to create it and write files into it. But I think I solved the problem. I played with permission settings on the security tab of the ESET folder. Did you uninstall Eset, then re-install Eset after deleting the C:\ProgramData\ESET\ESET Security folder you created? The Eset installer will create this folder and populate it with data. Link to comment Share on other sites More sharing options...
konradk 0 Posted April 30, 2021 Author Share Posted April 30, 2021 Actually, it was just C:\ProgramData\ESET folder. Somehow I didn't notice it was supposed to be C:\ProgramData\ESET\ESET Security. Anyway, no, I didn't delete that folder. But after reinstalling ESET, it became inaccessible. Then I checked the properties of the folder and fiddled with the security settings and got it working. Link to comment Share on other sites More sharing options...
Recommended Posts