What triggers high administrator workload according to Application Control guidelines?

High administrator workload is triggered by not using Maintenance Mode during software updates. Maintenance Mode is designed to temporarily disable certain security features that could interfere with legitimate changes to the system, such as software updates. When Maintenance Mode is not utilized, each update may generate numerous alerts and logs, leading to increased demands on the administrator to review and respond to these notifications. This can involve investigating whether each event is a legitimate threat or just a byproduct of the update process.

In contrast, when Maintenance Mode is properly employed, it helps streamline the update process by reducing the alerts triggered by the updates themselves. This significantly decreases the administrative burden as there are fewer potential issues to manage during routine updates. Therefore, not using Maintenance Mode can lead to unnecessary complexities and extra workload, as administrators must actively monitor and react to every security notification that arises from the update activity.