Making emergency changes

Run Application Control in Update mode to perform emergency changes on a protected system.

Use Update mode to make changes that can't be made when Application Control is running in Enabled mode. When possible, use these other methods to allow changes:

In Enabled mode, if you install new software or add new files, the files aren't added to the allow list or allowed to execute unless you use a trusted method to add them. But, if you install or uninstall software, or add new files in Update mode, changes are tracked and added to the allow list.

To approve changes to the system, a change window is defined, where users and programs can make changes to the system. Update mode allows you to perform these tasks:

Memory-protection techniques are enabled in Update mode, so that running programs can't be exploited.

From Update mode, you can switch to Enabled or Disabled mode.