Enabling Password protection

This Help provides information related to Kaspersky Endpoint Agent for Windows. This information may be partially or completely inapplicable to Kaspersky Endpoint Agent for Linux. For complete information about Kaspersky Endpoint Agent for Linux, please refer to the Help of the solution that includes the application: Kaspersky Anti Targeted Attack Platform or Kaspersky Managed Detection and Response.

Unrestricted user access to the application and its settings can reduce the security level of the device. Password protection allows to limit user access to the application.

To enable password protection:

Open Kaspersky Security Center Administration Console.
In the console tree, open the Policies folder.
Select Kaspersky Endpoint Agent policy and open its properties window in one of the following ways:
- Double-click the policy name.
- Select Properties in the policy context menu.
- Select the Configure policy settings item in the right part of the window.
In the Application settings section select the Security settings subsection.
In the Password protection group of settings select the Apply password protection check box.
Enter a password and confirm it.
It is recommended to select the password that meets the following requirements:
- Password is at least 8 characters long.
- Password does not user account name.
- Password does not match the name of the device on which Kaspersky Endpoint Agent is installed.
- Password contains characters from at least three of the following groups:
  - uppercase characters (A-Z);
  - lowercase characters (a-z);
  - numbers (0-9);
  - special characters (!$#%).
In the upper right corner of the settings group, change the switch from Unaffected by policy to Under policy.
Click OK.

Password protection is enabled. If a user attempts to perform a password protected action, the application prompts the user to enter the password.

The application does not check the strength of the specified password. We recommend that you use third-party tools to verify the strength of the password. The password is considered strong enough, if verification results confirm that the password cannot be guessed for at least 6 months.

The application does not prohibit from entering password after many attempts of entering incorrect password.