Kaspersky Embedded Systems Security for Windows Web Plug-in has the following limitations compared to Kaspersky Embedded Systems Security for Windows Administration Plug-in:
To add users or user groups, you need to specify the security descriptor strings using the security descriptor definition language (SDDL).
Predefined security level cannot be changed for the Real-Time File Protection task.
Application Launch Control task rules cannot be created using digital certificate or Kaspersky Security Center events.
Device Control task rules cannot be generated based on connected devices or on system data.