Configuring Maintenance Mode Settings Parent topic

To perform updates on endpoints, you can configure Maintenance Mode settings to define a period when Safe Lock allows all file executions and adds all files that are created, executed, or modified to the Approved List.
For added security, you can enable file scanning and select the scan action after the maintenance period.
Important
Important
Before using Maintenance Mode, apply the required updates on the following supported platforms:
  • For Windows 2000 Service Pack 4, apply the update KB891861 from the Microsoft Update Catalog website.
  • For Windows XP SP1, upgrade to Windows XP SP2.
Note
Note
  • Before starting Maintenance Mode, perform an agent update on endpoints.
  • To reduce risk of infection, run only applications from trusted sources on endpoints during the maintenance period.
  • Agents start one scheduled maintenance period at a time. If you configure a new maintenance period, the system overwrites existing maintenance schedule that has not started yet.
  • When the agent is about to leave Maintenance Mode, restarting the agent endpoint prevents Safe Lock from adding files in the queue to the Approved List.
  • During the maintenance period, you cannot perform agent patch updates on endpoints.
  • When Maintenance Mode is enabled, Safe Lock does not support Windows updates that require restarting an endpoint during the maintenance period.
  • To run an installer that deploys files to a network folder during the maintenance period, Safe Lock must have access permission to the network folder.

Procedure

  1. Go to Agents in the navigation at the top of the web console.
    The Agent Management screen appears.
  2. Select one or more agents and groups.
  3. Click Send Command and select Configure Maintenance Mode.
    The Configure Maintenance Mode screen appears.
  4. Select Enable and configure the settings.
    Select Disable to stop Maintenance Mode or cancel scheduled maintenance period on endpoints.
  5. Under Schedule, specify the duration of the maintenance period.
  6. Select Scan endpoints when Maintenance Mode stops and a scan action to scan endpoints for threats when the maintenance period is over.
    Note
    Note
    Safe Lock scans files that are created, executed, or modified on endpoints during the maintenance period.
  7. Click Deploy.
    A confirmation screen appears.
  8. Click Yes to deploy the settings to the selected agents or groups.