0

I have noticed that calls to MgCmdRun.exe GetDeviceTicket -AccessKey <SOME_KEY> were causing glitches in a rendering application I am working on.

I was wondering if there was a way I could temporarily disable these calls.

Here is a list of what I have tried:

As of right now, none of these solutions worked. By disabling WAM, I noticed that Windows Defender Scheduled tasks were no longer being executed. However, some calls to GetDeviceTicket were still being made.

I would appreciate a solution that would disable/enable these calls without the need to reboot the system. I also still need Windows Defender to be running.

EDIT:

I noticed that if I go under Windows Security > Protection Updates and click on Check for updates, the GetDeviceTicket is called

Thanks!

3
  • Can you whitelist the App that makes the call? That would be the best way.
    – anon
    Commented Nov 17, 2022 at 12:36
  • I don't know how I can get the name of the app that makes the call. I am using mpcmdrun.exe -GetFiles to get the logs and then I browse the file called MpCmdRun-NetworkService.log in order to get the log of the call to mpcmdrun GetDeviceTicket -AccessKey ... Commented Nov 17, 2022 at 12:59
  • I also know that if I go under Windows Security > Protection Updates and click on Check for updates, the GetDeviceTicket is called Commented Nov 17, 2022 at 13:01

0

You must log in to answer this question.

Browse other questions tagged .