Kaspersky Security for Windows Server

Predefined scan scopes

The tree or list of protected device file resources for the selected On-Demand Scan task is displayed in the Scan scope settings window.

The file resource tree or list displays the nodes to which you have read-access based on the configured Microsoft Windows security settings.

Kaspersky Security for Windows Server contains the following predefined scan scopes:

• My Computer. Kaspersky Security for Windows Server scans the entire protected device.
• Local hard drives. Kaspersky Security for Windows Server scans objects on a protected device hard drives. All hard drives, individual disks, folders or files can be included in or excluded from the scan scope.
• Removable drives. Kaspersky Security for Windows Server scans files on external devices, such as CDs or removable drives. All removable drives, individual disks, folders or files can be included in or excluded from the scan scope.
• Network. Network folders or files can be added to the scan scope by specifying their path in UNC (Universal Naming Convention) format. The account used to start the task must have permissions to access the added network folders and files. By default, On-Demand Scan tasks run under the system account.

  Connected network drives will also not be displayed in the protected device's file resource tree. To include objects on network drives in the scan scope, specify the path to the folder that corresponds to the network drive in UNC format.

• System memory. Kaspersky Security for Windows Server scans the executable files and modules of the processes running in the operating system when the scan is initiated.
• Startup objects. Kaspersky Security for Windows Server scans objects referred to by registry keys and configuration files, for example WIN.INI or SYSTEM.INI, as well as the application's modules that are started automatically at protected device startup.
• Shared folders. You can include shared folders on the protected device in the scan scope.
• Virtual drives. Virtual folders, files, and drives connected to the protected device can be included in the scan scope, for example, common cluster drives.

  Virtual drives created using a SUBST command are not displayed in the protected device's file resource tree in the Application Console. In order to scan objects on a virtual drive, include the protected device folder associated with the virtual drive in the scan scope.

By default, you can view and configure predefined scan scopes in the network file resource tree; you can also add predefined scopes to the network file resource list during its formation in the scan scope settings.

By default, On-Demand Scan tasks are run under the following scopes:

• Scan at Operating System Startup task:
  • Local hard drives
  • Removable drives
  • System memory
• Critical Areas Scan:
  • Local hard drives (excluding Windows folders)
  • Removable drives
  • System memory
  • Startup objects
• Other tasks:
  • Local hard drives (excluding Windows folders)
  • Removable drives
  • System memory
  • Startup objects
  • Shared folders