cancel
Showing results for 
Search instead for 
Did you mean: 
secnubs
Level 7

Booted in Disabled mode

Does anyone know what this means. The Rule message is "Booted in Disabled mode". Is this an actionable alert?.

1.PNG

Thanks

0 Kudos
1 Reply
abanaru
Level 11

Re: Booted in Disabled mode

For sure your system booted with Application Control in disabled mode.

Check P155 in https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/25000/PD25618/en_US/...

You can consider this to be an alert because running in disabled mode causes unapproved whitelisted apps to run on your system.

Someone probably ran sadmin disable on that system or used ePO to put it in disabled mode.