You can use policies to allow or block start of the local system On-Demand Scan task and the Update task according to the schedule configured locally on each protected device in the administration group:
If the scheduled start of a specific type of local system task is prohibited by a policy, these tasks will not be performed on the protected device according to the schedule. You can start local system tasks manually.
If the scheduled start of a specific type of local system task is allowed by a policy, these tasks will be performed in accordance with the scheduled parameters configured locally for this task.
By default, start of local system tasks is prohibited by policy.
We recommend that you do not allow local system tasks to start if updates or on-demand scans are administered by Kaspersky Security Center group tasks.
If you do not use group update or on-demand scan tasks, allow local system tasks to be started in the policy: Kaspersky Security for Windows Server will perform application database and module updates, and start all local system on-demand scan tasks in accordance with the default schedule.
You can use policies to allow or block the scheduled start of the following local system tasks:
On-Demand Scan tasks: Critical Areas Scan, Quarantine Scan, Scan at Operating System Startup, Application Integrity Control, Baseline File Integrity Monitor.
If the protected device is excluded from the administration group, the system tasks schedule will be enabled automatically.
To allow or block the scheduled start of Kaspersky Security for Windows Server system tasks in a policy take the following steps:
In the Managed devices node in the Administration Console tree, expand the required group and select the Policies tab.
On the Policies tab, in the context menu of the policy for which you want to configure the scheduled start of Kaspersky Security for Windows Server system tasks on the group of protected devices, select the Properties item.
In the Properties: <Policy name> window, open the Application settings section. In the Run system tasks section, click the Settings button and do the following:
Select the Allow on-demand scan tasks launch and Allow update tasks and Copying Update task launch check boxes to allow the scheduled launch of the listed tasks.
Clear the Allow on-demand scan tasks launch and Allow update tasks and Copying Update task launch check boxes to disable the scheduled launch of the listed tasks.
Selecting or clearing the check box will not affect the start settings of any local custom tasks of this type.
Make certain that the policy you are configuring is active and applied to the selected group of protected devices.
Click OK.
The configured scheduled task start settings are applied for the selected tasks.