Reboot Free Deactivation is an MACC feature for use on systems with strict reboot schedules in complex environments. MACC can't be disabled without a system reboot. But, you can achieve a
partial disable or a
no-tracking state without a reboot by using a special mode called
Global Passthru mode.
Global
Passthru mode is like the present-day pass through feature of MACC. The only difference is that it is applicable to all processes that run on a system, instead of selected processes. In this state, because everything is passed through, MACC monitors nothing. The system behaves as if it is in
Disabled mode with the following exceptions:
- MACC kernel modules remain loaded.
- Minimal hooking and tracking continues.
Global
Passthru mode is integrated with basic solidifier functions to provide an implicit reboot-free deactivation of the product. It does not require you to do anything extra. Global
Passthru mode is enabled when MACC is in
Enable mode and the command
sadmin disable is run. After it is turned on, any process that runs on the system is passed through. When the
sadmin status command is run, the following is displayed:
McAfee Solidifier: Disabled*
McAfee Solidifier on reboot: Disabled
Global
Passthru mode can only be reached from
Enable mode. A complete disable happens
only after the system has been rebooted
NOTE: If MACC is ePolicy Orchestrator (ePO) managed, running the
Disable task immediately disables the protection regardless of the reboot endpoint setting. If reboot is not selected, the Global
Passthru mode is enabled until the next reboot and the Solidcore Status value is shown as
Disabled.
A reboot is needed to upgrade or uninstall the MACC client.