In the Store in the Administration Server database for (days) field, enter the number of days during which the Administration Server must store the results of the task.
Select the Take response actions after an IOC is found.
Select one or more Threat Response actions applied to IOC detections:
Move copy to Quarantine, delete object. If this option is selected, Kaspersky Endpoint Security deletes the malicious object found on the computer. Before deleting the object, Kaspersky Endpoint Security creates a backup copy in case the object needs to be restored later. Kaspersky Endpoint Security moves the backup copy to Quarantine.
Run scan of critical areas. If this option is selected, Kaspersky Endpoint Security runs the Critical Areas Scan task. By default, Kaspersky Endpoint Security scans the kernel memory, running processes, and disk boot sectors.
The task is run regularly, on specified days of each month, at the specified time.
By default, days of the month are not selected, and the default start time is 18:00:00.
If you want to modify advanced settings of the schedule, in the Advanced task properties section, you can select the following check boxes:
If you want the application to run missed database update tasks at the earliest opportunity, select the Run missed tasks check box.
If you want to prevent many workstations connecting to the Administration Server at the same time by running tasks randomly within a certain time frame rather than on a schedule, select the Use automatically randomized delay for task starts check box.
If you want to prevent many workstations connecting to the Administration Server at the same time by running tasks randomly within a certain time frame rather than on a schedule:
Select the Use random task start delay in the interval (min) check box.
You can select the default account or create an account:
If you select the default account, the task is run under the same account that was used to install and run the application that runs the task.
If you choose to create an account, enter the credentials of the account to use for running the task. The account must have sufficient permissions to run the task.