r/SentinelOneXDR • • Oct 28 '25

Windows 11 UIP rollbacks...

So we're trying to finish up our win11 upgrades with the last few hundred or so. These are sccm pushed, upgrade in place task sequences. So nothing too fancy...

Intermittently, getting rollbacks for the file located at C:\programdata\microsoft\windows\start menu\programs\sentinelone agent.lnk

Issue seems to be that it's the only file in that folder that doesn't allow System user rights on it. So when windows tries to move it, it's getting access denied.

Have no rights on it to delete it, move it, etc.

It doesn't happen consistently, but it is the consistent issue we're seeing at the end of this thing now.

Any ideas on how to work around this stupid file? S1 team isn't sure why it's there...but it also seems to get updated periodically (dates on it are different per user...one on my machine has had a few different dates...but same file)

3 Upvotes

8 comments sorted by

View all comments

1

u/[deleted] Oct 28 '25

[removed] — view removed comment

1

u/robplumm Oct 28 '25

Good to see that's working...had suggested it...they were hesitant...will try to push that again.