Video Screencast Help
Security Community Blog

Enabling or disabling 8.3 short paths with NtfsDisable8dot3NameCreation

Created: 13 Jun 2011 • Updated: 13 Jun 2011
Joao Costa's picture
+1 1 Vote
Login to vote

Some random bit of knowledge that I ran across today while troubleshooting a Symantec Endpoint Protection Manager 11.x issue with a customer: 

Sometimes you may need to specify the Php.ini path in IIS (Handler Mappings of the Reporting virtual directory > edit the PHP entry) by adding the 8.3 path (short DOS path) to php-cgi.exe followed by –c parameter and 8.3 path to Php.ini (for more information check Specifying which php.ini the Endpoint Protection Manager (SEPM) Reporting website uses). This is useful or maybe even required if you have more than one PHP version installed in your server.

In this case I tried to find the 8.3 Path of the SEPM folder to add it in IIS with the dir /X switch but it simply didn’t exist. This particular SEPM folder didn’t have a short path..

 

Note how LiveUpdate has a 8.3 path "LIVEUP~1" but Symantec Endpoint Protection Manager does not…

It turns out that this can be disabled/enabled with the NtfsDisable8dot3NameCreation registry key (How to Disable the 8.3 Name Creation on NTFS Partitions) but setting this key to 0 and rebooting does not change existing folders. It is necessary to create a new folder to have Windows create its 8.3 path. One way to do it is for the SEPM is:

  1. Stop the services: Symantec Endpoint Protection Manager, the Symantec Embedded database and World Wide Web Publishing Service
  2. Rename the Symantec Endpoint Protection Manager folder to TempSEPM
  3. Create a new folder with the name Symantec Endpoint Protection Manager
  4. Cut all contents from the TempSEPM folder and paste them on the newly created Symantec Endpoint Protection Manager