Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.8

To have the Advanced Threat Prevention plugin monitor HKLM\SOFTWARE\Dell\Dell Data Protection for changes to the LogVerbosity value, and update the client log level accordingly, set the following value.

[HKLM\SOFTWARE\Dell\Dell Data Protection]

"LogVerbosity"=DWORD:<see below>

Dump: 0

Fatal: 1

Error 3

Warning 5

Info 10

Verbose 12

Trace 14

Debug 15

The registry value is checked when the Advanced Threat Prevention service starts or whenever the value changes. If the registry value does not exist, there is no change to the logging level.

Use this registry setting for testing/debugging only, as this registry setting controls log verbosity for other components, including Encryption and Encryption Management Agent.

Compatibility Mode allows applications to run on the client computer while Memory Protection or Memory Protection and Script Control policies are enabled. Enabling compatibility mode requires adding a registry value on the client computer.

To enable compatibility mode, follow these steps:

1. In the Management Console, disable the Memory Protection Enabled policy. If the Script Control policy is enabled, disable it.
2. Add the CompatibilityMode registry value.
   1. Using the Registry Editor on the client computer, go to HKEY_LOCAL_MACHINE\SOFTWARE\Cylance\Desktop.
   2. Right-click Desktop, click Permissions, then take ownership and grant yourself Full Control.
   3. Right-click Desktop, then select New > Binary Value.
   4. For the name, type CompatibilityMode.
   5. Open the registry setting and change the value to 01.
   6. Click OK, then close Registry Editor.

   To add the registry value with a command, you can use one of the following command line options to run on the client computer:

   • (For one computer) Psexec:

     psexec -s reg add HKEY_LOCAL_MACHINE\SOFTWARE\Cylance\Desktop /v CompatibilityMode /t REG_BINARY /d 01

   • (For multiple computers) Invoke-Command cmdlet:

     $servers = "testComp1","testComp2","textComp3"

     $credential = Get-Credential -Credential {UserName}\administrator

     Invoke-Command -ComputerName $servers -Credential $credential -ScriptBlock {New-Item -Path HKCU:\Software\Cylance\Desktop -Name CompatibilityMode -Type REG_BINARY -Value 01}

3. In the Management Console, re-enable the Memory Protection Enabled policy. If the Script Control policy was previously enabled, re-enable it.