Special aspects of Password protection permissions

Password protection permissions have some important aspects and limitations to consider.

Application settings

If a user's computer is running under a policy, make sure that all the required settings in the policy are available for editing (the attributes are open).

Exit the application

There are no special considerations or limitations.

Disable protection components

• It is not possible to grant the permission to disable protection components for the Everyone group. To allow users other than KLAdmin to disable protection components, add a user or group that has the Disable protection components permission in the Password Protection settings.
• If a user's computer is running under a policy, make sure that all the required settings in the policy are available for editing (the attributes are open).
• To disable protection components in the application settings, a user must have the Configure application settings permission.
• To disable protection components from the context menu (by using the Pause protection menu item), a user must have the Disable control components permission in addition to the Disable protection components permission.

Disable control components

• It is not possible to grant the permission to disable control components for the Everyone group. To allow users other than KLAdmin to disable control components, add a user or group that has the Disable control components permission in the Password Protection settings.
• If a user's computer is running under a policy, make sure that all the required settings in the policy are available for editing (the attributes are open).
• To disable control components in the application settings, a user must have the Configure application settings permission.
• To disable control components from the context menu (by using the Pause protection menu item), a user must have the Disable protection components permission in addition to the Disable control components permission.

Disable Kaspersky Security Center policy

You cannot grant the "Everyone" group the permission to disable the Kaspersky Security Center policy. To allow users other than KLAdmin to disable the policy, add a user or a group that has the Disable Kaspersky Security Center policy permission in the Password Protection settings.

Remove key

There are no special considerations or limitations.

Remove / modify / restore the application

If you have allowed removing, modifying, and restoring the application for the "All" group, Kaspersky Endpoint Security does not request a password when the user attempts to carry out these operations. Therefore, any user including users from outside the domain, can install, modify, or restore the application.

Restore access to data on encrypted drives

You can restore access to data on encrypted drives only if you are logged in as KLAdmin. Permission to perform this action cannot be granted to any other user.

Viewing reports

There are no special considerations or limitations.

Restore from Backup

There are no special considerations or limitations.

Page top