Enabling and disabling external management defense

External management defense prevents remote administration applications (for example, TeamViewer or RemotelyAnywhere) from gaining access to Kaspersky Endpoint Security. This technology includes the following external management defense features:

• Protection against modification of Kaspersky Endpoint Security settings.
• Protection of Kaspersky Endpoint Security services (such as the avp service).
• Protection of application processes.

Protection against external management is available only for computers running 32-bit operating systems, except for Windows 7. For Windows 7, the technology is available for 32-bit and 64-bit operating systems.

To enable or disable protection against external management:

1. In the main application window, click the button .
2. In the application settings window, select General settings → Application settings.
3. Use the Allow managing Kaspersky Endpoint Security settings via remote control applications check box to enable or disable external management defense.

   If the check box is selected, you can use remote administration applications to configure Kaspersky Endpoint Security and manage its services and processes.

   If the check box is cleared, external management defense prevents remote administration applications from gaining access to Kaspersky Endpoint Security. You can allow configuring Kaspersky Endpoint Security using specific remote administration applications. To do so, you must add the remote administration application to the trusted list. In this case, the remote administration defense will still prevent the remote administration application from gaining access to services and processes of Kaspersky Endpoint Security.

4. Use the Enable external service control check box to enable or disable the protection of Kaspersky Endpoint Security services against external management.

   To quit the application from the command line, disable the protection of Kaspersky Endpoint Security services against external management.

5. Save your changes.

As a result, when external management defense is enabled, Kaspersky Endpoint Security prevents the mouse pointer from entering the application window. When a remote user attempts to shut down an application service, a system window with an error message appears.

Page top