Problem
Customer couldn’t start servers from the MF Enterprise Server Administration webpage after logging in as SYSAD/SYSAD, but was able to start from the Net Express 32 bit command prompt. In addition SYSAD did not have authority to operate the JES Control page, add an initiator or submit a job.

Resolution
Modifying  the customer’s McAfee Firewall settings resolved the issue. Ensuring the following Micro Focus applications were authorized under McAfee’s Host Intrusion Prevention feature allowed the ESA user to function normally:

MF Directory Service Daemon (mfds.exe) for UDP and TCP transmission protocols
MF Communications Process (mfcs.exe) 
Region Console Daemon (cascd.exe)
Region Server Manager (casmgr.exe)
Region Temp Storage, Channels and Containers Control (castsc.exe)
Service Execution Process (cassi.exe)
Console Unexpected Process Termination Daemon (caspdied.exe)
Region Server Termination  (casstop.exe)

Other Enterprise Server Processes should be added to the list as needed.

Incident #2572137

Old KB# 36223