To make sure that ACC and ENS can coexist on an endpoint, you must disable the ACC
memory protection and
script as updater features. To disable the features, change the policy (via ePolicy Orchestrator (ePO)) or manually on the endpoint (via the command-line interface (CLI)). The steps below describe how to use both methods to disable these features. They also describe how to install or upgrade the ENS and ACC software.
To disable memory protection in the policy:
- Log on to the ePO console.
- Go to Policy Catalog.
- Select Application Control.
- Edit the currently assigned policy in Application Control options.
- Click Features.
- Disable Memory Protection.
- Save the policy.
- Apply the policy to the system.
NOTE: Disabling memory protection requires a reboot. Configure the policy, and wake up the endpoint. Run the site as an updater disable client task, which reboots the endpoint all in one step.
To disable a site as updater with a client task:
- Log on to the ePO console.
- Navigate to Client Task, New Client Task, Solidcore, SC: Run Client Task Now.
- To disable a site as updater, type the following commands in the client task:
Features disable sau
ssreboot -t 300 -m "Rebooting machine to disable MP and SAU"
- Reboot the endpoint.
NOTE: The command
ssreboot generates a pop-up message and reboots the endpoint after 300 seconds have passed. Set the policy to disable MP before running the site as an updater disable task to avoid having to reboot the endpoint twice.
Manual steps to follow with ACC after ENS installation, for ENS to run:
- Run the Solidifier CLI on the endpoint as administrator.
- At the prompt, type sadmin recover to recover the CLI.
- At the prompt, type sadmin features disable MP to disable the MP.
- At the prompt, type sadmin features disable SAU to disable the site as updater.
- Reboot the endpoint.
IMPORTANT: When you perform a clean (new) installation of these products, the proper order of installation is ENS first, and then ACC. When upgrading ENS, make sure that either ACC is placed in Update mode or
SetupEP.exe is added as an updater.