Policy management

A policy is a collection of application settings that are specified for an administration group. A policy does not define all application settings.

Multiple policies with different values can be configured for a single application. However, there can be only one active policy for an application at a time within an administration group.

You can use policies to apply identical Kaspersky Endpoint Security settings to all client computers within an administration group.

You can remotely change the values of settings specified by a policy for individual computers in an administration group using Kaspersky Endpoint Security. You can locally change only those settings modification of which is not prohibited by the policy.

The "lock" status of a setting within a policy determines whether or not an application setting on a client computer can be edited:

• When a setting is "locked" (), you cannot edit this setting locally. The setting value specified by the policy is used for all client computers within the administration group.
• When a setting is "unlocked" (), you can edit the setting locally. A locally configured setting is applied to all client computers within the administration group. The policy-configured setting is not applied.

After the policy is applied for the first time, local application settings change in accordance with the policy settings.

You can use policies to configure the settings of the File Threat Protection, Firewall, Anti-Cryptor, on-access System Integrity Monitoring, and Storage task of Kaspersky Endpoint Security.

The rights to access policy settings (read, write, execute) are specified for each user who has access to the Kaspersky Security Center Administration Server and separately for each functional scope of Kaspersky Endpoint Security. To configure the rights to access policy settings, go to the Security section of the properties window of the Kaspersky Security Center Administration Server.

You can perform the following operations with a policy:

• Create a policy.
• Edit policy settings.

  If the user account under which you accessed the Administration Server does not have rights to edit settings of certain functional scopes, the settings of these functional scopes are not available for editing.

• Delete a policy.
• Change policy status.

For more detail about policies, refer to Kaspersky Security Center documentation.

Page top