Run Application Control in Update mode to perform emergency changes on a protected system.
Use Update mode to make changes that can't be made when Application Control is running in Enabled mode. When possible, use these other methods to allow changes:
Trusted directories
Updaters
In Enabled mode, if you install new software or add new files, the files aren't added to the allow list or allowed to execute unless you use a trusted method to add them. But, if you install or uninstall software, or add new files in Update mode, changes are tracked and added to the allow list.
To approve changes to the system, a change window is defined, where users and programs can make changes to the system. Update mode allows you to perform these tasks:
Schedule software and patch installations.
Remove or change software.
Dynamically update the allow list.
From Update mode, you can switch to Enabled or Disabled mode.