Special aspects of Password protection permissions
Password protection permissions have some important aspects and limitations to consider.
Application settings
If a user's computer is running under a policy, make sure that all the required settings in the policy are available for editing (the 
attributes are open).
Exit the application
There are no special considerations or limitations.
Disable protection components
- It is not possible to grant the permission to disable protection components for the Everyone group. To allow users other than KLAdmin to disable control components, add a user or group that has the Disable protection components permission in the Password Protection settings.
- If a user's computer is running under a policy, make sure that all the required settings in the policy are available for editing (the attributes are open).
- To disable protection components in the application settings, a user must have the Configure application settings permission.
- To disable protection components from the context menu (by using the Pause protection menu item), a user must have the Disable protection components permission in addition to the Disable control components permission.
Disable control components
- It is not possible to grant the permission to disable control components for the Everyone group. To allow users other than KLAdmin to disable control components, add a user or group that has the Disable control components permission in the Password Protection settings.
- If a user's computer is running under a policy, make sure that all the required settings in the policy are available for editing (the attributes are open).
- To disable control components in the application settings, a user must have the Configure application settings permission.
- To disable control components from the context menu (by using the Pause protection menu item), a user must have the Disable control components permission in addition to the Disable protection components permission.
Disable Kaspersky Security Center policy
You cannot grant the "Everyone" group the permission to disable the Kaspersky Security Center policy. To allow users other than KLAdmin to disable the policy, add a user or group that has the Disable Kaspersky Security Center policy permission in the Password Protection settings.
Remove key
There are no special considerations or limitations.
Remove / modify / restore the application
If you have allowed removing, modifying, and restoring the application for the "All" group, Kaspersky Endpoint Security does not request a password when the user attempts to carry out these operations. Therefore, any user including users from outside the domain, can install, modify, or restore the application.
Restore access to data on encrypted drives
You can restore access to data on encrypted drives only if you are logged in as KLAdmin. Permission to perform this action cannot be granted to any other user.
Viewing reports
There are no special considerations or limitations.
Restore from Backup
There are no special considerations or limitations.
