MACC protection can be set to any of the following four modes:
- Enable Mode
- Disable Mode
- Update Mode
- Observation Mode
If Windows File Based Write Filter (FBWF) is enabled, switching the protection modes of MACC might not be successful.
For example, if you run
sadmin disable to disable the MACC protection and restart the system, the system starts with MACC
enabled.
