To create a protected resource in Kaspersky Security Center:
Open Kaspersky Security Center Administration Console.
In the Managed devices folder of the console tree, open the folder with the name of the administration group to which the relevant protected virtual machines belong.
In the workspace, select the Policies tab.
Select a Light Agent for Windows policy in the list of policies and open the Properties: <Policy name> by double-clicking.
In the policy properties window, select the Application Privilege Control section in the list on the left.
In right part of the window, the Application rules section, click the Settings button located in the lower part of the section.
In the Applications window that opens, in the left part of the Protected resources tab, select a section or category of protected resources to which you want to add a new protected resource.
In the upper-left part of the Protected resources tab, open the context menu of the Add button and select the type of resource that you want to add: File or folder or Registry key.
In the Protected resource window that opens, in the Name field, enter a name for the protected resource.
Click the Browse button.
In the window that opens, specify the necessary settings depending on the type of protected resource that you want to add and click OK.
In the Protected resource window, click OK.
A new item appears in the list of protected resources of the selected category on the Protected resources tab.
In the Applications window, click OK.
Click the Apply button.
To create a protected resource in the local interface:
In the left part of the window, in the Endpoint control section, select Application Privilege Control.
In the right part of the window, the Application Privilege Control component's settings are displayed.
Click the Resources button.
The Applications window opens on the Protected resources tab.
Complete steps 7–13 of the previous instructions.
If the settings in the local interface are not available, this means that the values of settings defined by the policy are used for all protected virtual machines of the administration group.
To save changes, click the Save button.
After you add a protected resource, you can edit or remove it by clicking the Edit or Delete buttons in the upper-left part of the Protected resources tab.