Install required updates and fix vulnerabilities task settings

Settings specified during task creation

You can specify the following settings when creating a task. Some of these settings can also be modified in the properties of the created task.

Specify rules for installing updates
These rules are applied to installation of updates on client devices. If rules are not specified, the task has nothing to perform. For information about operations with rules, refer to Rules for update installation.
Start installation at device restart or shutdown
If this option is enabled, updates are installed when the device is restarted or shut down. Otherwise, updates are installed according to a schedule.

Use this option if installing the updates might affect the device performance.

By default, this option is disabled.
Install required general system components
If this option is enabled, before installing an update the application automatically installs all general system components (prerequisites) that are required to install the update. For example, these prerequisites can be operating system updates

If this option is disabled, you may have to install the prerequisites manually.

By default, this option is disabled.
Allow installation of new application versions during updates
If this option is enabled, updates are allowed when they result in installation of a new version of a software application.

If this option is disabled, the software is not upgraded. You can then install new versions of the software manually or through another task. For example, you may use this option if your company infrastructure is not supported by a new software version or if you want to check an upgrade in a test infrastructure.

By default, this option is enabled.

Upgrading an application may cause malfunction of dependent applications installed on client devices.
Download updates to the device without installing them
If this option is enabled, the application downloads updates to the device but does not install them automatically. You can then Install downloaded updates manually.

Microsoft updates are downloaded to the system Windows storage. Updates of third-party applications (applications made by software vendors other than Kaspersky and Microsoft) are downloaded to the folder specified in the Download updates to field.

If this option is disabled, the updates are installed to the device automatically.

By default, this option is disabled.
- Download updates to
  This folder is used to download updates of third-party applications (applications made by software vendors other than Kaspersky and Microsoft).
Enable advanced diagnostics
If this feature is enabled, Network Agent writes traces even if tracing is disabled for Network Agent in Kaspersky Security Center Remote Diagnostics Utility. Traces are written to two files in turn; the total size of both files is determined by the Maximum size, in MB, of advanced diagnostics files value. When both files are full, Network Agent starts writing to them again. The files with traces are stored in the %WINDIR%\Temp folder. These files are accessible in the remote diagnostics utility, you can download or delete them there.

If this feature is disabled, Network Agent writes traces according to the settings in Kaspersky Security Center Remote Diagnostics Utility. No additional traces are written.

When creating a task, you do not have to enable advanced diagnostics. You may want to use this feature later if, for example, a task run fails on some of the devices and you want to get additional information during another task run.

By default, this option is disabled.
- Maximum size, in MB, of advanced diagnostics files
  The default value is 100 MB, and available values are between 1 MB and 2048 MB. You may be asked to change the default value by Kaspersky Technical Support specialists when information in the advanced diagnostics files sent by you is not enough to troubleshoot the problem.

Settings specified after task creation

You can specify settings in the sections listed below only after a task is created. For a full description of the task settings, see General task settings.

General. In this section, general information about the task is displayed. Also, you can specify to which devices the Install required updates and fix vulnerabilities task should apply:
- Distribute to subgroups
  This option is only available in the settings of the group tasks.
  
  When this option is enabled, the task scope includes:
  - The administration group that you selected while creating the task.
  - The administration groups subordinate to the selected administration group at any level down by the group hierarchy.
  When this option is disabled, the task scope includes only the administration group that you selected while creating the task.
  
  By default, this option is enabled.
- Distribute to secondary and virtual Administration Servers
  When this option is enabled, the task that is effective on the primary Administration Server is also applied on the secondary Administration Servers (including virtual ones). If a task of the same type already exists on the secondary Administration Server, both tasks are applied on the secondary Administration Server—the existing one and the one that is inherited from the primary Administration Server.
  
  This option is only available when the Distribute to subgroups option is enabled.
  
  By default, this option is disabled.
Updates to install
In the Updates to install section, you can view the list of updates that the task installs. Only updates that match the applied task settings are shown.
Test installation of updates:
- Do not scan. Select this option if you do not want to perform a test installation of updates.
- Run scan on selected devices. Select this option if you want to test updates installation on selected devices. Click the Add button and select devices on which you need to perform test installation of updates.
- Run scan on devices in the specified group. Select this option if you want to test updates installation on a group of devices. In the Specify a test group field, specify a group of devices on which you want to perform a test installation.
- Run scan on specified percentage of devices. Select this option if you want to test updates installation on some portion of devices. In the Percentage of test devices out of all target devices field, specify the percentage of devices on which you want to perform a test installation of updates.