To make sure that MACC and ENS can coexist on an endpoint, you must disable the MACC memory protection and script as updater features. To disable the features, change policy (via ePolicy Orchestrator (ePO)) or manually on the endpoint (via CLI). The steps below describe how to use both methods to disable these features. It also describes how to install or upgrade the ENS and MACC software.

To disable memory protection in the policy:

1. Log on to the ePO console.
2. Go to Policy Catalog.
3. Select Application Control.
4. Edit the currently assigned policy in Application Control options.
5. Click Features.
6. Disable Memory Protection.
7. Save the policy.
8. Apply the policy to the system.

NOTE: Disabling memory protection requires a reboot. Configure the policy, and wake up the endpoint. Run the site as updater disable client task, which reboots the endpoint all in one step.

To disable site as updater with a client task:

1. Log on to the ePO console.
2. Navigate to Client Task, New Client Task, Solidcore, SC: Run Client Task Now.
3. To disable site as updater, type the following commands in the client task: 
    
   Features disable sau
   ssreboot -t 300 -m "Rebooting machine to disable MP and SAU"
    
4. Reboot the endpoint.

NOTE: The command ssreboot generates a pop-up message and reboots the endpoint after 300 seconds have passed. Set the policy to disable MP before running the site as updater disable task to avoid having to reboot the endpoint twice.

Manual steps to follow with MACC after ENS installation, for ENS to run:

1. Run the Solidifier command line interface (CLI) on the endpoint as administrator.
2. At the prompt, type sadmin recover to recover the CLI.
3. At the prompt, type sadmin features disable MP to disable MP.
4. At the prompt, type sadmin features disable SAU to disable site as updater.
5. Reboot the endpoint.

IMPORTANT: When you perform a clean (new) installation of these products, the proper order of installation is ENS first, then MACC. When upgrading ENS, make sure that either MACC is placed in Update mode or add SetupEP.exe as an updater.