Using the kesl-control --set-settings command keys, you can edit individual values of task settings, as well as add or remove scan scopes and exclusion scopes for tasks of the OAS, ODS, OAFIM, ODFIM, and AntiCryptor types.
Configuring individual task settings
To edit individual values of task settings using command line keys, execute the following command:
kesl-control --set-settings <task ID/name> <setting name>=<setting value> [<setting name>=<setting value>]
where:
<task ID/name> is the ID assigned to the task at the time of its creation, or the name of the task in the command line.<setting name>=<setting value> is the name and value of one of the task settings. You can get the current values of task settings using the command for displaying task settings.The values of the specified task settings will be changed.
If you change the allowlist, or prohibit launch of all applications or applications that affect the operation of Kaspersky Endpoint Security in the Application Control task settings, run the --set-settings command with the --accept key.
Adding and removing a scan scope
To add a scan scope using command line keys, execute the following command:
kesl-control --set-settings <task ID/name> --add-path <path>
where:
<task ID/name> is the ID assigned to the task at the time of its creation, or the name of the task in the command line.--add-path <path> adds the path to the directory with the objects to be scanned.A new [ScanScope.item_#] section will be added to the task settings. The application scans the objects in the directory specified by the Path setting. The remaining settings of the scan scope take default values.
If the task settings already contain a [ScanScope.item_ #] section with the specified value for the Path setting, a duplicate section is not added.
If the UseScanArea setting is set to No its value will change to Yes after this command is executed and the objects located in this directory will be scanned.
Example: Adding a scan scope for a task with ID=100:
The following scan scope settings will be added to the task:
|
To delete a scan scope using command line keys, execute the following command:
kesl-control --set-settings <task ID/name> --del-path <path>
where:
<task ID/name> is the ID assigned to the task at the time of its creation, or the name of the task in the command line.--del-path <path> deletes the path to the directory with the objects to be scanned.The [ScanScope.item_#] section that contains the specified path will be deleted from the task settings. The application will not scan the objects in the specified directory.
Adding and removing an exclusion scope
To add an exclusion scope using command line keys, execute the following command:
kesl-control --set-settings <task ID/name> --add-exclusion <path>
where:
<task ID/name> is the ID assigned to the task at the time of its creation, or the name of the task in the command line.--add-exclusion <path> adds the path to the directory with the objects that you want to exclude from the scan.A new [ExcludedFromScanScope.item_#] section will be added to the task settings. The application will exclude objects in the directory specified by the Path setting from scans. The remaining settings of the exclusion scope take default values.
If the task settings already contain an [ExcludedFromScanScope.item_#] section with the specified value for the Path setting, a duplicate section is not added.
If the UseScanArea setting is set to No its value will change to Yes after this command is executed and the objects located in this directory will be excluded from scans.
To delete an exclusion scope using command line keys, execute the following command:
kesl-control --set-settings <task ID/name> --del-exclusion <path>
where:
<task ID/name> is the ID assigned to the task at the time of its creation, or the name of the task in the command line.--del-exclusion <path> deletes the path to the directory with the objects to be excluded.The [ExcludedFromScanScope.item_#] section that contains the specified path will be deleted from the task settings. The application will not exclude the objects in the specified directory from the scan.