When upgrading a ControlUp monitor server from version 9.0.0.1680 to 9.2.0.733 using the PowerShell commandlet Invoke-CUMonitorUpdate, the process may fail with an "Access is denied" error. This failure occurs after the installation steps "Install Verify Service already installed" and "Install Copy Files" complete successfully, specifically at the step involving stopping the `cuMonitor` service. The error indicates that Windows denied access during the attempt to stop or control this service, despite running PowerShell as an administrator and having folder-level access to the monitor installation directory.
The root cause is typically related to security settings or interference by antivirus (AV) or endpoint detection and response (EDR) software, which can block the service from stopping. Alternatively, a restrictive service Access Control List (ACL) can prevent the upgrade from proceeding. When attempting to upgrade through the ControlUp Console, a similar failure occurs silently because the console relies on remote commands (via admin share or WMI) that suffer the same permissions restrictions.
To resolve this issue, manually stopping the `cuMonitor` service with elevated privileges is required. Running `sc.exe stop cuMonitor` on the monitor host as an administrator can successfully stop the service. If this command fails, it is necessary to configure AV/EDR exclusions for the ControlUp monitor executable and folder (`C:\Program Files\Smart-X\ControlUpMonitor\` and `cuMonitor.exe`) or adjust the service's ACL using `sc.exe sdshow cuMonitor` to inspect and modify permissions. Once the service is stopped, re-running the Invoke-CUMonitorUpdate commandlet completes the upgrade successfully.
When upgrading through the ControlUp Console, ensure the account used has local administrator rights on the monitor host; otherwise, upgrade via the PowerShell commandlet locally on the machine is recommended for reliability. This approach has been verified to resolve the access denied error and enable the upgrade to proceed without interruption.
For more details on managing ControlUp monitor services and upgrade procedures, refer to the official ControlUp documentation at https://docs.controlup.com or consult ControlUp support resources.
Read the entire article here...
Antivirus Related Training & Support Archives
Antivirus training and support-related archives from inside the ControlUp Community on Slack.
Troubleshooting Black Screen Issues on Omnissa Horizon
Users on Omnissa Horizon are experiencing black screen issues when reconnecting to a session. The issue occurs 4-5 times a day and the only workaround is to force a logoff, leading to lost work. The setup and environment are described in detail, along with past troubleshooting attempts. A fellow ControlUp member suggests looking at Horizon Agent logs and utilizing Horizon's API to lock a VM for further investigation.
Read the entire article here...
Read the entire article here...
Investigating Traffic Spikes in ControlUp Citrix VDI Environment
A user reported significant spikes in traffic in their Citrix VDI environment and suspects that ControlUp's VDI agent may be causing it. However, they are not sure if ControlUp uses Akamai for their CDN services. Other users suggested using the command "netstat -ano | findstr akamaitechnologies" to check for any processes using Akamai. The investigation will continue.
Read the entire article here...
Read the entire article here...
Troubleshooting Chrome in a Citrix Environment: The “Sad Chrome Icon” Issue Explained
There have been reports of Google Chrome failing to load in Citrix environments, resulting in a "sad Chrome icon." This is due to a conflict between Chrome's sandbox security feature and the Citrix virtual environment. Running Chrome with the -no-sandbox command-line switch may fix the issue, but it is not recommended for a production environment. Instead, updating Chrome and Citrix components, configuring group policy objects, and checking third-party software may resolve the issue. It is also recommended to properly handle Chrome's user profile data using a Citrix Profile Management solution.
Read the entire article here...
Read the entire article here...
Troubleshooting Consistent Processes in ControlUp
A user has noticed a process running consistently throughout the day and has created some antivirus exclusions. Another user asks if there are many actions running on the devices through ControlUp. The first user says they do not use scripts from ControlUp. No update has been received yet from a support case.
Read the entire article here...
Read the entire article here...
Troubleshooting Monitor Deployment Issues in ControlUp with Trellix
A user encountered issues with the deployment of monitors while using the Real-Time console, resulting in errors and failed services. Another user suggested the issues may be caused by Trellix, a common problem for page timeouts. The solution offered was to either increase the timeout or add the monitor service executable to exclusions. The issue is commonly seen with Trellix but can also affect other antivirus or security tools.
Read the entire article here...
Read the entire article here...
Understanding the Device Controls Column and Troubleshooting Carbon Black with ControlUp
A user asked what the Device>Controls column does, and others suggested it shows installed but disabled antivirus and deployment products. The user was unsure if Secure DX was accurately displaying the status of Carbon Black. Other users suggested checking services and data being pulled from the device, and to contact support if necessary. Screenshots were shared.
Read the entire article here...
Read the entire article here...
How does ControlUp report failed logins in the logon duration report?
ControlUp users were discussing how to determine failed logins for the Logon Duration Report, and the root cause of the issue: the Antivirus product scanning thousands of files stored in the Roaming profile. The current FSLogix release was mentioned to be 'trash', while UPM has been known to work better with one issue. Citrix has been asked to incorporate a work-around in a future UPM release to solve the issue.
Read the entire article here...
Read the entire article here...
Help with hung User Sessions in EUC Platforms on ControlUp Real-Time DX
This EUC discussion explored solutions to an issue where user's sessions are hung and don't want to reconnect. ControlUp's Invoke-cuquery can be used to figure out where a user has sessions, and a registry key value can be used to log them off - though this process must be done remotely. Alternately, there may be solutions available through the EUC platform. When sessions don't disconnect, this is usually due to antivirus, onedrive, or any systray tool - the best solution is to add these to the LogoffCheckSysModules registry value.
Read the entire article here...
Read the entire article here...
Investigating Unusual Behavior on ControlUp VDI’s
ControlUp experienced weird issues in their environment, where VDI's were ignoring all policies and scanning their drive. Microsoft Defender Engine 4.8.2210.6 was identified as the cause and a rebuild was done using the latest 4.8.2211.5 engine to fix it. Other users were asked if they have experienced a similar issue. It was further clarified that the engine was not supposed to be scanning the drives but the process itself was pulling data from the PVS server. Investigations found that most systems couldn't give the version of the process and the instances that did didn't show any spike in I/O.
Read the entire article here...
Read the entire article here...