Permanently disable Memory Protection

[User69985425]

Hi, we need to know if there is a way to permanently disable Memory Protection feature from MACC since we noticed that the "Enabled on Reboot" flag is always on after we disable memory protection modules on a group of systems. Thank you for your assistance. Regards, Kyle

[DG1]

Hi Kyle,

Thank you for posting and the below KB will help you with the same.

https://kc.mcafee.com/corporate/index?page=content&id=KB90732

[User69985425]

Hello Deepak G.

I appreciate your quick response.

We were already aware of the article which you linked however we did not take action because it mentions that you cannot enable again after installation. 

We would like to know which installation the article is talking about. Is it McAfee Solidcore?

So once we will disable it will be permanently disable right? 

Thank you

Kyle.

[DG1]

Hi Kyle,

The KB is talking about the McAfee Solidcore (MACC). Please do let me know if you have any other questions as well. 

[User69985425]

Hi Deepak

Ok so to confirm we can re-enable memory protection in the future if need be? If so how do we achieve this please?

Another question I have is whether memory protection is disabled on whatever MACC mode the system is on, such as Enable Mode Observe Mode.

Thank you.

Kyle

[DG1]

Hi Kyle,

Disabling the SAU and MP features in the initial feature configuration is permanent. These features can't be enabled again after installation.  You will have to reinstall to enable the features and Yes it is disabled on all modes. 

[User69985425]

Thank you Deepak

Quoting you, please note the words in bold.

---

@DG1 wrote:

Disabling the SAU and MP features in the initial feature configuration is permanent. These features can't be enabled again after installation.  You will have to reinstall to enable the features and Yes it is disabled on all modes. 

---

Installation and Re-installation refer to Solidcore right and not the actual task installation?

Sorry if I repeated my question but I need to make sure I understand correctly before I apply this change on a number of machines.

Thank you.

Regards,

Kyle 

[DG1]

Hi Kyle,

Reinstallation refers to Solidcore. 

[DG1]

Hi Kyle,

Hope I have answered all your questions if so you mark this as  "Accept as a solution".

[User69985425]

Hi Deepak

We followed the steps in the article you linked and it didn't work. Please see attachments.

The system in question is the following:

• OS: Windows 10 Enterprise Build 17763 64-bit
• Solidcore: 8.3.1.124

Article mention:

Their status appears as Disabled (configuration blocked) when these settings are enforced.

---

So where should we see this, on ePO or in CLI features list?

Thank you

Kyle