I'm getting a warning that Change Guardian for Windows is disabled for an agent. (NETIQKB71998)

  • 7771998
  • 30-Dec-2009
  • 15-Mar-2013

Environment

NetIQ Change Guardian for Windows 2.x

Situation

Change Guardian for Windows is disabled for an agent.
How do I reenable CGW on an agent after it's been uninstalled or disabled?

Resolution

To resolve this, you will need to edit the registry of the agent machine.

  1. Open REGEDIT.
  2. Navigate to:  HKLM|SOFTWARE|NetIQ|Change Guardian for Windows
  3. Find the String:  CGWMonitoringDisabled
  4. Delete the entire registry key (not just the value, but the key itself).
  5. Restart the NetIQ Security Manager agent.
  6. Validate that the driver is now running, by running the following command in a cmd prompt window:  DRIVERQUERY | FIND "cgwfunc"

*The cgw filter driver will be listed as cgwfunc with some numbers after it indicating which version is running.

Cause

NetIQ Change Guardian for Windows 2.x has a registry key in place that prevents installation after you uninstall CGW 2.x

Additional Information

Formerly known as NETIQKB71998