Preparing the application for use

After deploying the application on client computers, to work with Kaspersky Endpoint Security from Kaspersky Security Center Web Console you need to perform the following actions:

• Create and configure a policy.

  You can use policies to apply identical Kaspersky Endpoint Security settings to all client computers within an administration group. The Quick Start Wizard of Kaspersky Security Center automatically creates a policy for Kaspersky Endpoint Security.

• Create the Update of databases and application modules and Malware Scan tasks.

  The Update of databases and application modules task is required for keeping computer security up to date. When the task is performed, Kaspersky Endpoint Security updates the anti-virus databases and application modules. The Update of databases and application modules task is created automatically by the Administration Server quick start wizard. To create the Update of databases and application modules task, install the Kaspersky Endpoint Security for Windows Management Plug-in while running the Wizard.

  The Malware Scan task is required for the timely detection of viruses and other malware. You need to manually create the Malware Scan task.

  How to create a Malware Scan task in the Administration Console (MMC)

  1. In the Kaspersky Security Center Administration Console tree, select Tasks.

     The list of tasks opens.

  2. Click New task.

  The Task Wizard starts. Follow the instructions of the Wizard.

  Step 1. Selecting task type

  Select Kaspersky Endpoint Security for Windows (12.12) → Malware Scan.

  Step 2. Scan scope

  Create the list of objects that Kaspersky Endpoint Security will scan while performing a scan task.

  Step 3. Kaspersky Endpoint Security action

  Choose the action on threat detection:

  • Disinfect, delete if disinfection fails. If this option is selected, the application automatically attempts to disinfect infected file that is detected. If disinfection fails, the application deletes the file.
  • Disinfect, inform if disinfection fails. If this option is selected, Kaspersky Endpoint Security automatically attempts to disinfect all infected files that are detected. If disinfection fails, Kaspersky Endpoint Security adds the information about the infected files that are detected to the list of active threats.
  • Inform. If this option is selected, Kaspersky Endpoint Security adds the information about infected files to the list of active threats on detection of these files.
  • Run Advanced Disinfection immediately. If the check box is selected, Kaspersky Endpoint Security uses the Advanced Disinfection technology to treat active threats during the scan.

    Advanced disinfection technology is aimed at purging the operating system of malicious applications that have already started their processes in RAM and that prevent Kaspersky Endpoint Security from removing them by using other methods. The threat is neutralized as a result. While Advanced Disinfection is in progress, you are advised to refrain from starting new processes or editing the operating system registry. The advanced disinfection technology uses considerable operating system resources, which may slow down other applications. After the advanced disinfection is complete, Kaspersky Endpoint Security will restart the computer without asking the user for confirmation.

  • Run only when the computer is idle. Postponed start of the task when computer resources are busy. Kaspersky Endpoint Security starts the scan task if the computer is locked or if the screen saver is on. If you have interrupted the execution of the task, for example by unlocking the computer, Kaspersky Endpoint Security automatically runs the task, continuing from the point where it was interrupted. This schedule option lets you conserve computer resources when the computer is being used.

  Step 4. Selecting the devices to which the task will be assigned

  Select the computers on which the task will be performed. The following options are available:

  • Assign the task to an administration group. In this case, the task is assigned to computers included in a previously created administration group.
  • Select computers detected by the Administration Server in the network: unassigned devices. The specific devices can include devices in administration groups as well as unassigned devices.
  • Specify device addresses manually, or import addresses from a list. You can specify NetBIOS names, IP addresses, and IP subnets of devices to which you want to assign the task.

  Step 5. Selecting the account to run the task

  Select an account to run the Malware Scan task. By default, Kaspersky Endpoint Security starts the task with the rights of a local user account. If the scan scope includes network drives or other objects with restricted access, select a user account with the sufficient access rights.

  Step 6. Configuring a task start schedule

  Configure a schedule for starting a task, for example, manually or after anti-virus databases are downloaded to the repository.

  Step 7. Defining the task name

  Enter a name for the task, for example, Daily full scan.

  Step 8. Completing task creation

  Exit the Wizard. If necessary, select the Run the task after the wizard finishes check box. You can monitor the progress of the task in the task properties. As a result, the Malware Scan task will be executed on the user computers in accordance to the specified schedule.

  How to create a Malware Scan task in the Web Console

  1. In the main window of the Web Console, select Assets (Devices) → Tasks.

     The list of tasks opens.

  2. Click Add.

     The Task Wizard starts.

  3. Configure the task settings:
     1. In the Application drop-down list, select Kaspersky Endpoint Security for Windows 12.12.0.
     2. In the Task type drop-down list, select Malware Scan.
     3. In the Task name field, enter a brief description, for example, Weekly scan.
     4. In the Devices to which the task will be assigned block, select the task scope.
  4. Select devices according to the selected task scope option. Go to the next step.
  5. Select an account to run the task. By default, Kaspersky Endpoint Security starts the task with the rights of a local user account.
  6. Exit the Wizard.

     A new task will be displayed in the list of tasks.

  7. To configure the task schedule, go to the task properties.

     It is recommended to schedule the task to run at least once a week.

  8. Select the check box next to the task.
  9. Click Start.

     You can monitor the status of the task, and the number of devices on which the task was completed successfully or completed with an error.

  As a result, the Malware Scan task will be executed on the user computers in accordance to the specified schedule.

• Optimize Kaspersky Endpoint Security performance.