If participation in Kaspersky Security Network is enabled, Kaspersky Endpoint Security sends KSN a query about the reputation of an application each time the application is started. Based on the response from KSN, the application may be moved to a trust group that is different from the one specified in the Application Privilege Control settings.
To configure the settings for placement of applications in trust groups:
In the right part of the window, the settings of the Application Privilege Control component are displayed.
Trusted vendors are those software vendors that are included in the trusted group by Kaspersky. You can also add vendor certificate to the trusted system certificate store manually.
For security purposes, the Trusted group is not included in the values of the Automatically move to group setting.