Start Kaspersky Endpoint Security on computer startup (recommended)

Windows

macOS

If this functionality is enabled, Kaspersky Endpoint Security is started after the operating system loads to protect the computer during the entire session.

If this functionality is disabled, Kaspersky Endpoint Security is not started after the operating system loads until the user starts it manually. Computer protection is disabled and user data may be exposed to threats.

Show the application icon

Windows

macOS

The client computer has an application icon in the notification area. In the context menu of the icon, the user can perform operations with Kaspersky Endpoint Security. Kaspersky Endpoint Security also displays notifications above the application icon.

Do not display application interface for users

Windows

macOS

If this check box is selected, Kaspersky Endpoint Security does not allow the user to open the main window of the application and hides the application interface on a remote computer.

If this check box is cleared, the user can open the main window of Kaspersky Endpoint Security and use the application interface on a remote computer.

Hide Application Activity Monitor section

Windows

If this check box is selected, the Application Activity Monitor button is not available in the main window of Kaspersky Endpoint Security on the client computer. Application Activity Monitor is a tool designed for viewing information about the activity of applications on a user's computer in real time.

Manage updates locally

macOS

If this check box is selected, the user can locally manage Kaspersky Endpoint Security updates on a remote computer.

If this check box is cleared, you can manage Kaspersky Endpoint Security updates on a remote computer only using the Kaspersky Endpoint Security plug-in in Kaspersky Security Center.

Manage keys locally

macOS

If this check box is selected, the user can locally manage Kaspersky Endpoint Security keys on a remote computer.

If this check box is cleared, you can manage Kaspersky Endpoint Security keys on a remote computer only using the Kaspersky Endpoint Security plug-in in Kaspersky Security Center.

Quit the application

macOS

If this check box is selected, the Exit command is present in the context menu of the application icon. The user of a remote computer can stop Kaspersky Endpoint Security on the remote computer.

If this check box is cleared, the Exit command is not present in the context menu of the application icon. The user of a remote computer cannot stop Kaspersky Endpoint Security on the remote computer.

Access to local tasks

Windows

Linux

If the check box is selected, local tasks are displayed in the Kaspersky Endpoint Security local interface. When there are no additional policy restrictions, the user can configure and run tasks. However, configuring task run schedule remains unavailable for the user. The user can run tasks only manually.

If the check box is cleared, use of local tasks is stopped. In this mode, local tasks do not run according to schedule. Tasks cannot be started or configured in the local interface of Kaspersky Endpoint Security, or when working with the command line.

A user can still start a scan of a file or folder by selecting the Scan for viruses option in the context menu of the file or folder. The scan task is started with the default values of settings for the custom scan task.

View group tasks

Windows

If the check box is selected, group tasks are displayed in the Kaspersky Endpoint Security local interface. The user can view the list of all tasks in the application interface.

If the check box is cleared, Kaspersky Endpoint Security displays an empty task list.

Manage group tasks

Windows

Linux

If the check box is selected, users can start and stop group tasks specified in the Kaspersky Endpoint Security console. Users can start and stop tasks in the application interface or in the simplified application interface.

If the check box is cleared, Kaspersky Endpoint Security starts scheduled tasks automatically, or the administrator starts tasks manually in the Kaspersky Endpoint Security console.

Computer status

Windows

Settings for displaying the statuses of client computers with Kaspersky Endpoint Security installed in the Web Console when errors occur while applying a policy or executing a task. The following statuses are available OK, Warning and Critical.

Application status notifications

Windows

Linux

Settings of application event notifications in the system tray. Select the check boxes opposite those categories of events about which you want to see notifications in the notification area.

• Active threats.
• Computer restart required.
• Problems with anti-malware database.
• Problems with protection level.
• License issues.
• Updates available.

When events associated with the selected categories occur, the application icon in the notification area will change to or depending on the severity of the warning.

Local anti-malware database status notifications

Windows

Settings of notifications about outdated anti-virus databases used by the application. You can specify the number of days after which Kaspersky Endpoint Security sends the "Databases are out of date" and "Databases are extremely out of date" to the user.

Application startup settings

Linux

Application launch settings:

• Maximum consecutive unsuccessful attempts to start the application.
• Maximum time to wait for application start (min). After the specified waiting period expires, the kesl process is restarted.

Install application updates without restart

Windows

Upgrading the application without a restart provides uninterrupted server operation when the application version is updated.

Upgrading the application without a restart has the following limitations:

• You can upgrade the application without a restart starting with version 11.10.0. To upgrade an earlier version of the application, you must restart the computer.
• You can install patches without a restart starting with version 11.11.0. To install patches for earlier versions of the application, a computer restart may be required.
• Upgrading the application without a restart is not available on computers with enabled data encryption (Kaspersky encryption (FDE), BitLocker, File Level Encryption (FLE)). To upgrade the application on computers with enabled data encryption, the computer must be restarted.
• The application cannot be upgraded on a virtual machine without a restart. To upgrade the application on a virtual machine, you must restart the virtual machine.

After upgrading Kaspersky Endpoint Security to version 11.10.0 or later without a restart, the computer will have two Kaspersky Endpoint Security applications installed. Do not manually remove the previous version of the application. The previous version will be removed automatically when the computer is restarted.

The default value of the parameter varies depending on the type of the operating system. If the application is installed on a workstation, the upgrading the application without a restart option is disabled. If the application is installed on a server, the upgrading the application without a restart option is enabled.

Compatibility with remote administration software

Windows

If using Kaspersky Endpoint Security alongside Remote Administration Tools (RAT) causes problems, you can enable the compatibility mode. The problems may be related to the incompatibility of RATs with the Secure Desktop functionality of the application. The purpose of this functionality is to confirm actions that can potentially lower the security level of the computer. This functionality lets an application display a confirmation dialog that is isolated from other processes. This functionality uses elevated rights to secure the request. In this way, only the user can confirm the action and not the malware.

RAT compatibility mode can reduce the security level of the computer. We do not recommend enabling the compatibility mode if Kaspersky Endpoint Security is not causing problems with your RAT. By default, the functionality is disabled.

Example: When using the browser in RemoteApp mode, Kaspersky Endpoint Security may not display a confirmation window when visiting a website with an untrusted certificate because RemoteApp does not support the Secure Desktop functionality of the application. This can cause the browser to become unresponsive. For the browser to work correctly in RemoteApp mode, you must enable the compatibility mode. You can also try enabling the compatibility mode if you encounter problems with the Secure Desktop functionality when using other third-party software.