Another method is to use the debugger image file execution options technique that allows you to circumvent execution of the exe system-wide.
http://blogs.msdn.com/b/greggm/archive/2005/02/21/377663.aspx Robert "Lindenfeld, Ivan" <[email protected]> wrote: >Thanks, Robert. We can't think of a reason to want SC notifications on >a terminal / citrix server, we will consider your approach. Thanks > >Jason, which Kenny is that? And it's good that it's being fixed in R2, >but I miss the days when service packs were for hotfixes and Releases >were for new features. The current "method" is too muddy. > >Ivan > >From: [email protected] >[mailto:[email protected]] On Behalf Of Jason Sandys >Sent: Wednesday, August 28, 2013 10:39 AM >To: [email protected] >Subject: [mssms] RE: Over Run with SCNotify files on terminal >servers/Citrix > >That works - who needs notifications in an RDSH session :) > >Kenny did reply (not sure if it made it to the list though); basically, >it's being fixed in R2 to his knowledge. > >J > >From: >[email protected]<mailto:[email protected]> >[mailto:[email protected]] On Behalf Of Robert Haneberg >Sent: Wednesday, August 28, 2013 1:53 AM >To: [email protected]<mailto:[email protected]> >Subject: [mssms] AW: Over Run with SCNotify files on terminal >servers/Citrix > >My way was to disable the scnotify.exe with an applocker gpo on the >terminal servers. So it couldn't be executed. >Only problem is that you don't get any notifications and i really think >that it isn't supported by MS. But until now it works fine. > >Von: >[email protected]<mailto:[email protected]> >[mailto:[email protected]] Im Auftrag von Jason Sandys >Gesendet: Dienstag, 27. August 2013 23:34 >An: [email protected]<mailto:[email protected]> >Betreff: [mssms] RE: Over Run with SCNotify files on terminal >servers/Citrix > >There actually is a way to disable scnotify or handle this situation (I >just don't remember what it is off-hand). Torsten or Kenny would know >off-hand. > >J > >From: >[email protected]<mailto:[email protected]> >[mailto:[email protected]] On Behalf Of Lindenfeld, Ivan >Sent: Tuesday, August 27, 2013 4:24 PM >To: [email protected]<mailto:[email protected]> >Subject: [mssms] RE: Over Run with SCNotify files on terminal >servers/Citrix > >I figured it was possibly a common problem since Citrix is common. > >I can prune them with some kind of automation script, but that would be >crap. > >Of course, we are possibly seeing Citrix step on WMI classes in >root/ccm as a chronic issue, so I'm not a friend 'o Citrix at the >moment. > >From: >[email protected]<mailto:[email protected]> >[mailto:[email protected]] On Behalf Of Jason Sandys >Sent: Tuesday, August 27, 2013 4:54 PM >To: [email protected]<mailto:[email protected]> >Subject: [mssms] RE: Over Run with SCNotify files on terminal >servers/Citrix > >Decommission your Citrix servers. > >(end of day, you didn't ask for a good solution, just what could be >done) > >From: >[email protected]<mailto:[email protected]> >[mailto:[email protected]] On Behalf Of Lindenfeld, Ivan >Sent: Tuesday, August 27, 2013 3:38 PM >To: [email protected]<mailto:[email protected]> >Subject: [mssms] Over Run with SCNotify files on terminal >servers/Citrix > >I just deleted 5,000 SCNotify and _SCNotify files from the SCCM client >logs folder on a Citrix server. This was 300MB of files. > >What can be done to mitigate this? It was not the first time, so I >don't think this is a one-off. > >Thanks. > >Ivan Lindenfeld >Fidelity National Financial >Jacksonville Florida

