Task management
You can create the following types of tasks to administer Kaspersky Endpoint Security through Kaspersky Security Center:
- Local tasks that are configured for an individual client computer.
- Group tasks that are configured for client computers within administration groups.
- Tasks for a selection of computers.
You can create any number of group tasks, tasks for a selection of computers, or local tasks. For more details about working with administration groups and selections of computers, please refer to Kaspersky Security Center Help.
Kaspersky Endpoint Security supports the following tasks:
- Virus Scan. Kaspersky Endpoint Security scans the computer areas specified in the task settings for viruses and other threats. The Virus Scan task is required for the operation of Kaspersky Endpoint Security and is created during the Initial Configuration Wizard. It is recommended to configure a schedule that runs the task at least once per week.
- Add key. Kaspersky Endpoint Security adds a key for activating applications, including an additional key. Before running the task, make sure that the number of computers, on which the task is to be executed, does not exceed the number of computers allowed by the license.
- Change application components. Kaspersky Endpoint Security installs or removes components on client computers according to the list of components specified in the task settings. The File Threat Protection component cannot be removed. The optimal set of Kaspersky Endpoint Security components helps to conserve computer resources.
- Inventory. Kaspersky Endpoint Security receives information about all application executable files that are stored on computers. The Inventory task is performed by the Application Control component. If the Application Control component is not installed, the task will end with an error.
- Update. Kaspersky Endpoint Security updates databases and application modules. The Update task is required for the operation of Kaspersky Endpoint Security and is created during the Initial Configuration Wizard. It is recommended to configure a schedule that runs the task at least once per day.
- Wipe data. Kaspersky Endpoint Security deletes files and folders from users' computers immediately or if there is no connection with Kaspersky Security Center for a long time.
- Update rollback. Kaspersky Endpoint Security rolls back the last update of databases and application modules. This may be necessary if, for example, new databases contain incorrect data that could cause Kaspersky Endpoint Security to block a safe application.
- Integrity check. Kaspersky Endpoint Security analyzes application files, checks files for corruption or modifications, and verifies the digital signatures of application files.
- Manage Authentication Agent accounts. Kaspersky Endpoint Security configures the Authentication Agent account settings. An Authentication Agent is needed for working with encrypted drives. Before the operating system is loaded, the user needs to complete authentication with the Agent.
Tasks are run on a computer only if Kaspersky Endpoint Security is running.
Add a new task
How to create a task in the Administration Console (MMC)
- Open the Kaspersky Security Center Administration Console.
- Select the Tasks folder in the Administration Console tree.
- Click the New task button.
The Task Wizard starts.
- Follow the instructions of the Task Wizard.
How to create a task in the Web Console and Cloud Console
- In the main window of Web Console, select Devices → Tasks.
The list of tasks opens.
- Click the Add button.
The Task Wizard starts.
- Configure the task settings:
- In the Application drop-down list, select Kaspersky Endpoint Security for Windows (11.4.0).
- In the Task type drop-down list, select the task that you want to run on user computers.
- In the Task name field, enter a brief description, for example,
Update the application for accounting. - In the Select devices to which the task will be assigned section, select the task scope.
- Select devices according to the selected task scope option. Click the Next button.
- Finish the wizard by clicking the Finish button.
A new task will be displayed in the list of tasks. The task will have the default settings. To configure the task settings, you need to go to the task properties. To run a task, you need to select the check box opposite the task and click the Start button. After the task has started, you can pause the task and resume it later.
In the list of tasks, you can monitor the task results, which include the task status and the statistics for task performance on computers. You can also create a selection of events to monitor the completion of tasks (Monitoring and reports → Event selections). For more details on event selection, please refer to the Kaspersky Security Center Help Guide. Task execution results are also saved locally in Windows event log and in Kaspersky Endpoint Security reports.
Task access control
The rights to access Kaspersky Endpoint Security tasks (read, write, execute) are defined for each user who has access to Kaspersky Security Center Administration Server, through the settings of access to functional areas of Kaspersky Endpoint Security. To configure access to the functional areas of Kaspersky Endpoint Security, go to the Security section of the properties window of Kaspersky Security Center Administration Server. For more details on task management through Kaspersky Security Center, please refer to the Kaspersky Security Center Help.
You can configure users’ rights to access tasks using a policy (task management mode). For example, you can hide group tasks in the Kaspersky Endpoint Security interface.
How to configure the task management mode in the Kaspersky Endpoint Security interface through the Administration Console (MMC)
- Open the Kaspersky Security Center Administration Console.
- In the Managed devices folder in the Administration Console tree, open the folder with the name of the administration group to which the relevant client computers belong.
- In the workspace, select the Policies tab.
- Select the necessary policy and double-click to open the policy properties.
- In the policy window, select Local Tasks → Task management .
- In the Task management section:
- If you want to allow users to work with local tasks in the interface and command line of Kaspersky Endpoint Security, select the Allow use of local tasks check box.
If the check box is cleared, the functions of local tasks are stopped. In this mode, local tasks do not run according to schedule. Local tasks are also unavailable for starting and editing in the local interface of Kaspersky Endpoint Security, and when working with the command line.
- If you want to allow users to view the list of group tasks, select the Allow group tasks to be displayed check box.
- If you want to allow users to modify the settings of group tasks, select the Allow management of group tasks check box.
- Save your changes.
How to configure the task management mode in the Kaspersky Endpoint Security interface through the Web Console
- In the main window of Web Console, select the Devices → Policies and policy profiles tab.
- Click the name of the Kaspersky Endpoint Security policy for computers on which you want to enable support for portable mode.
The policy properties window opens.
- Select the Application settings tab.
- Go to Local tasks → Task management.
- Configure the task management mode (see the table below).
- Click OK.
- Confirm your changes by clicking Save.
Task management settings
Parameter
|
Description
|
Allow use of local tasks
|
If the check box is selected, local tasks are displayed in the Kaspersky Endpoint Security local interface. When there are no additional policy restrictions, the user can configure and run tasks. However, configuring task run schedule remains unavailable for the user. The user can run tasks only manually.
If the check box is cleared, use of local tasks is stopped. In this mode, local tasks do not run according to schedule. Tasks cannot be started or configured in the local interface of Kaspersky Endpoint Security, or when working with the command line.
A user can still start a virus scan of a file or folder by selecting the Scan for viruses option in the context menu of the file or folder. The scan task is started with the default values of settings for the custom scan task.
|
Allow group tasks to be displayed
|
If the check box is selected, group tasks are displayed in the Kaspersky Endpoint Security local interface. The user can view the list of all tasks in the application interface.
If the check box is cleared, Kaspersky Endpoint Security displays an empty task list.
|
Allow management of group tasks
|
If the check box is selected, users can start and stop group tasks specified in Kaspersky Security Center. Users can start and stop tasks in the application interface or in the simplified application interface.
If the check box is cleared, Kaspersky Endpoint Security starts scheduled tasks automatically, or the administrator starts tasks manually in Kaspersky Security Center.
|