I set up an ACATS only restriction today. The process was simple.
I indicated that I wanted to set up an ACAT only restriction. The other choice is a restriction on all account withdrawals. The representative need to then send you an authentication code . The rep had me indicate which of my accounts I wanted to include in the restriction. The restriction starts in 1-2 business days. Turning off the restriction is a similar call process.