Automox Attempts to Patch in User Space (Windows)

Automox keeps attempting to patch an application that was installed in user space

When an application is installed in User space, rather than System space, Automox cannot reach it because we operate as the NT AUTHORITY/SYSTEM user. This means that if you're seeing multiple attempts with Automox trying to patch something, and it's never successful, there's a chance it's installed in User space or it's a third-party application that needs to be shut down according to our third-party patching best practices document (see here).

 

See here more information from Microsoft:

https://learn.microsoft.com/en-us/windows-hardware/drivers/debugger/user-space-and-system-space

 

Was this article helpful?
0 out of 0 found this helpful