Releasing quarantined files using MpCmdRun.exe

Releasing quarantined files using MpCmdRun.exe

In certain scenarios the need may arise to release quarantined files from multiple FEP clients. Logging on to each client and using the FEP UI to release the quarantined files is cumbersome and generally not realistic although it can be done.



MpCmdRun.exe can be used to release quarantined files, MpCmdRun.exe -Restore -Name <name>



For example:

MpCmdRun.exe -Restore -Name RemoteAccess:Win32/RealVNC



The list of valid names can be found on the MMPC Encyclopedia, or in the FCS "Overrides" policy tab under "Overrides based on threat" 'Name' drop-down list.



Note: This can be used with both FCS and FEP 2010.
Leave a Comment
  • Please add 1 and 6 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Sort by: Published Date | Most Recent | Most Useful
Comments
  • Maheshkumar S Tiwari edited Revision 5. Comment: Added Tag and minor edit

Page 1 of 1 (1 items)
Wikis - Comment List
Sort by: Published Date | Most Recent | Most Useful
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • Maheshkumar S Tiwari edited Revision 5. Comment: Added Tag and minor edit

Page 1 of 1 (1 items)