Agent reports Memory Protection is enabled, but the Application Control Features policy is configured to not enforce memory protection

Technical Articles ID: KB81202
Last Modified: 12/19/2019

McAfee Application and Change Control (MACC) 6.2.x, 6.1.x

Microsoft Windows Server 2008
Microsoft Windows 7
Microsoft Windows Vista

The MACC Features policy for Windows is configured to not enforce Memory Protection (mp-vasr). MACC agents report mp-vasr is enabled.

MACC options do not control features for specific operating systems.

By default, mp-vasr is enabled for the following operating systems:

By default, mp-vasr is disabled for the following operating systems:

Create an SC: Run command task and disable mp-vasr.

Log on to the ePolicy Orchestrator (ePO) console.
Create a Client Task.
Select Solidcore 6.x.x for the Product and select SC: Run Commands for the Task Type.
Assign the task a name, click Save, and then click Next.
Type the following lines in the Run Commands section:
NOTE: Make sure that each line is in a new Run Commands box.

features disable mp-vasr
features disable mp-vasr-forced-relocation

Save the task.
Perform an agent wake-up call and push the new task to Application Control agents.

NOTE: A restart is needed to disable mp-vasr.

Application and Change Control 6.2.x
Application and Change Control 6.1 (EOL)

This article is available in the following languages:

English United States
Japanese

Knowledge Center