Application and Change Control might not switch the protection mode with Windows FBWF installed

Technical Articles ID: KB77610
Last Modified: 2022-10-21 10:10:50 Etc/GMT

Environment

Application and Change Control (ACC) 8.x.x, 7.x.x, 6.x.x

Microsoft Windows Embedded (all supported versions)

Problem

ACC protection can be set to any of the following four modes:

Enable Mode
Disable Mode
Update Mode
Observation Mode

If Windows File Based Write Filter (FBWF) is enabled, switching the protection modes of ACC might not be successful.

For example, if you run sadmin disable to disable the ACC protection and restart the system, the system starts with ACC enabled.

Cause

ACC keeps the mode on reboot information in the registry. If FBWF is enabled, Windows prevents ACC from writing to the registry and the application starts in the same mode as before the restart.

Solution

Run the following command and add the config folder as an FBWF exclusion:

Fbwfmgr /addexclusion <system drive>\windows\system32\config

Example:

Fbwfmgr /addexclusion c:\windows\system32\config

Doing so allows write calls to the ACC registry keys and allows the mode on reboot information to be saved in the registry.

For more information about FBWF exclusion rules, see this Microsoft article.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Application and Change Control might not switch the protection mode with Windows FBWF installed

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Application and Change Control might not switch the protection mode with Windows FBWF installed

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title