Application and Change Control might not switch the protection mode with Windows FBWF installed

技術的な記事 ID: KB77610
最終更新: 5/20/2020

環境

McAfee Application and Change Control (MACC) 8.x.x, 7.x.x, 6.x.x

Microsoft Windows Embedded (all supported versions)

問題

MACC protection can be set to any of the following four modes:

Enable Mode
Disable Mode
Update Mode
Observation Mode

If Windows File Based Write Filter (FBWF) is enabled, switching the protection modes of MACC might not be successful.

For example, if you run sadmin disable to disable the MACC protection and restart the system, the system starts with MACC enabled.

原因

MACC keeps the mode on reboot information in the registry. If FBWF is enabled, Windows prevents MACC from writing to the registry and the application starts in the same mode as before the restart.

解決策

Run the following command and add the config folder as an FBWF exclusion:

Fbwfmgr /addexclusion <system drive>\windows\system32\config

Example:

Fbwfmgr /addexclusion c:\windows\system32\config

Doing so allows write calls to the MACC registry keys and allows the mode on reboot information to be saved in the registry.

For more information about FBWF exclusion rules, see: http://msdn.microsoft.com/en-us/library/ee832773.aspx#Add_File.

影響を受ける製品

Application and Change Control 8.0.x
Application and Change Control 7.0.x
Application and Change Control 6.5.x
Application and Change Control 6.2.x
Application and Change Control 6.1
Configuration

言語:

この記事は、次の言語で表示可能です:

English United States
Japanese

技術用語集

用語集にある用語をハイライトする

当社の技術用語集を参照してください。

Knowledge Center

Application and Change Control might not switch the protection mode with Windows FBWF installed

環境

問題

原因

解決策

影響を受ける製品

言語:

技術用語集

Title

Title

Knowledge Center

Application and Change Control might not switch the protection mode with Windows FBWF installed

環境

問題

原因

解決策

影響を受ける製品

言語:

技術用語集

地域を選択してください

Title

Title