Bypass the process for Adobe and Chrome from MP-NX (DEP) and MP-VASR Forced Relocation. From the Solidifier command line interface (CLI), run the following commands:

• sadmin attr add -v chrome.exe
• sadmin attr add -n chrome.exe

The MPCompat configuration has been added to the sadmin config command. Modes of the MPCompat config are:

• Disable MPCompat (value = 0): Disable MPCompat feature.
• Include MPCompat (value = 1): Apply MPCompat feature to the applications having the h attribute set. This value is also default. 
• Exclude MPCompat (value = 2): Apply MPCompat feature on all applications except the application having the j attribute set.

The sadmin attr command is used to include or exclude a binary from MPCompat enforcement. Two new flags, -h and -j, have been introduced. The -h flag adds a binary in the MPCompat include list, and the -j flag adds it to the MPCompat exclude list.

Create a Solidcore SC Run Command client task containing multiple (2) lines:

1. Type the following command in the first line of the task:

2. Type the following command in the second line of the task:

3. Run the client task.
4. Reboot the system for the new configuration to take effect.

Disable ROP Protection for the process using Forced Relocation:

1. Start the ePO console and log on with the administrative account.
2. Navigate to Solidcore Application Control Rules, Exceptions, Memory Protection.
3. Select Disable ROP protection for a process using Forced Relocation.
4. Type chrome.exe in the process name field.
5. Click OK and apply the rule.

1. Create a shortcut for Chrome.
2. Right-click the new shortcut and click Properties.
3. Add the following to the target entry: -no-sandbox
4. Use this shortcut to start Chrome.

Or:

1. Click Start, Run, type cmd, and click OK.
2. Run the following command:  chrome.exe –no-sandbox