Updates fail for Win 7 Limited account

[DavidMbncus]

I normally log on Windows 7 with a Limited account (not Administrator).

When I Right Click the MBAM tray icon and click "Check for Updates",

MBAM connects to server, downloads the definitions, and then displays an "Access Denied" error message trying to apply the update (see screen print).

Also, I do not get the warning message that the "Database is out of date".

If i run MBAM from the Start Menu with "Run as administrator" I do get the "Database is out of date" warning, and can download and install the new definitions.

Is there a way MBAM can be configured so I get the "Database is out of date" warning when logged in with a Limited account?

Is there a way MBAM can be configured so I can install the latest definitions from the Tray icon when logged in with a Limited account?

My systems are fully updated and have the latest version of MBAM 1.65.1.1000.

Prior versions of MBAM worked the same way for me, so this not an issue with the latest version.

Thanks,

David

[daledoc1]

Hi, DavidMbncus:

AFAIK, the program and the database rules cannot be updated by a limited user account; this is for security reasons.

However, the PRO version can be set up in the scheduler from an Admin account, so that the SYSTEM is the account that updates the database rules based on any chosen schedule.

There is more information about using the MBAM PRO scheduler here:

How to Schedule an Update

How to Schedule a Scan

The experts and MBAM staff will likely have some additional information on this.

Thanks,

daledoc1

[Firefox]

AFAIK, the program and the database rules cannot be updated by a limited user account; this is for security reasons.

This is correct...

[DavidMbncus]

OK,

Thanks for the replies!

[AdvancedSetup]

The Pro version automatically updates and can even do scans with no user logged on as well as provide additional live protection on top of your antivirus.

http://www.malwarebytes.org/products/malwarebytes_pro/

[DavidMbncus]

I am using MBAM PRO on all my systems, and understand and use scheduling.

My mistake not specifying PRO, but i thought the Tray icon is only displayed for the PRO version.

Some of these systems may not have been re-booted or have been sleeping for several days or more.

So, i may start working on a system without thinking to check for the current MBAM "update status" and the definitions are several days old.

Sometimes the scheduled update fails when waking up a PC.

I believe it is because MBAM tries to check for updates before the network connection is re-established.

I just wondered if I could get a "Database is out of date" warning when opening MBAM with "Start Scanner" from the Tray icon and/or update the definitions from the Tray icon.

I have my systems set to warn if the database is outdated by 1 Day.

To me it seems it would be better to display the "Access Denied" message before downloading definitions that can't be updated.

Also, seems displaying the "Database is out of date" warning shouldn't really be a Security issue.

If these aren't possible i understand.

Just figured I'd ask...

[AdvancedSetup]

You could be correct about the updates not being applied if you're using the update on reboot or attempting to wake up and update.

I would recommend running something like this for your systems.

From an elevated admin command line:

mbam.exe /unschedule /all
mbam.exe /schedule /update /silent /hourly /every 4 /starting 11/04/2012 16:25:00 /recover 1
mbam.exe /schedule /scan -quick -log -silent -remove -reboot /wakefromsleep /silent /daily /every 1 /starting 11/04/2012 17:15:00 /recover 23

That should try to get updates every 4 hours and do a Quick Scan once a day.

If you're having issues with updates not happening for long periods of time when having the above set then I would open a ticket with the Help Desk and have them help you sort it out.

As this is a business system please contact business support.

In order to assist you better please provide the following information.

Cleverbridge Order Reference Number:

Organization name:

Approved Contact name:

If you no longer have access to the order number you can contact Cleverbridge to obtain information about your order.

Cleverbridge customer service

Thank you

[DavidMbncus]

This is not a Business System.

It's my Home User / Personal PC's.

Thanks, I'll check out changing the scheduled processes to be set from a Command line rather than through the GUI.

[AdvancedSetup]

No problem, my fault as I assumed with multiple that it was a business.

If you need further assistance then you can also contact the Consumer Help Desk from here

http://www.malwarebytes.org/contact_consumer/

Cheers

[DavidMbncus]

Understood.

I just happen to like building PC's and end up with a lot more hardware than i should have.