World of EUC

image.png

Guys, I'm providing some light oversight (No unintended access) for a client in the process of building a new in parallel CVAD build, the existing production is CVAD 7.15/Server 2016, the new is CVAD 2402/Server 2022. All has gone well but they have noticed Trend is launching when they open any published app. I have sent them the link to validate all AV exclusions are in place for the new components. In the meantime, does anyone have any other ideas at what might be causing this, here's an image to show the issue:

This doesn't look like an exclusion issue.
Do the new servers get the same settings in Trend Micro config? I've worked with a couple of different ones and on some there's a setting where you can hide the icon entirely.
Or otherwise, verify the registry keys for TrendMicro on both the old and new environment, for some AV programs you can hide the icon either on user or on computer level.

ChatGPT says this:
Open the *Trend Micro Apex One* or *OfficeScan* management console.
Navigate to the *Agent Management* section or equivalent.
Select the *Policy Settings* or *General Settings* for the group or specific server(s) where you want to hide the icon.
Look for an option like *Hide agent system tray icon* (this might be worded slightly differently depending on the product version).
Enable this option and save the changes.
Deploy the new policy to the relevant endpoint(s).

Or
Open the *Registry Editor* by typing `regedit` in the *Run* dialog (press `Win + R`).
Navigate to the following registry key:
• HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\Misc.
Look for the key named `HideTrayIcon`.
• If the key doesn't exist, you can create a new `DWORD` value with that name.
Set the value of `HideTrayIcon` to `1` (to hide the icon).
Close the Registry Editor and restart the Trend Micro service or the server.

Thanks <@U01HS6149SM> - I believe they do but I'll share this with the client. Thanking you, sir.

Yeah it's to do with auto-start, not exclusions

Symantec (SEP) used to have a similar issue with the smcgui tray icon appearing in each session and had to set reg key to remove it so presume its the same thing and the reg key that peter provided looks like it could do the trick