Kaspersky Endpoint Security for Windows 11.5.0

Adding and modifying an Application Control rule using Kaspersky Security Center

To add or modify an Application Control rule using Kaspersky Security Center:

1. Open the Kaspersky Security Center Administration Console.
2. In the Managed devices folder in the Administration Console tree, open the folder with the name of the administration group to which the relevant client computers belong.
3. In the workspace, select the Policies tab.
4. Select the necessary policy and double-click to open the policy properties.
5. In the policy window, select Security Controls → Application Control.

   In the right part of the window, the settings of the Application Control component are displayed.

6. Do one of the following:
   • To add a rule, click the Add button.
   • If you want to edit an existing rule, select it in the list of rules and click the Edit button.

   The Application Control rule window opens.

7. Do one of the following:
   • If you want to create a new category:
     1. Click the Create a category button.

        The user category creation wizard starts.

     2. Follow the instructions of the user category creation wizard.
     3. In the Category drop-down list, select the created application category.
   • If you want to edit an existing category:
     1. In the Category drop-down list, select the created application category that you want to edit.
     2. Click the Properties button.

        The Properties: <Category name> window opens.

     3. Modify the settings of the selected application category.
     4. Click OK.
     5. In the Category drop-down list, select the created application category based on which you want to create a rule.
8. In the Subjects and their rights table, click the Add button.

   The standard Microsoft Windows Select Users or Groups window opens.

9. In the Select Users or Groups window, specify the list of users and/or user groups for which you want to configure permission to start applications from the selected category.
10. In the Subjects and their rights table:
    • If you want to allow users and/or groups of users to start applications that belong to the selected category, select the Allow check box in the relevant rows.
    • If you want to block users and/or groups of users from starting applications that belong to the selected category, select the Deny check box in the relevant rows.
11. Select the Deny for other users check box if you want all users that do not appear in the Subject column and that are not part of the group of users specified in the Subject column to be blocked from starting applications that belong to the selected category.
12. If you want Kaspersky Endpoint Security to consider applications included in the selected application category as trusted updaters allowed to create other executable files that will be subsequently allowed to run, select the Trusted Updaters check box.

    When Kaspersky Endpoint Security settings are migrated, the list of executable files created by trusted updaters is migrated as well.

13. Save your changes.