You can use policies to allow or block the start of the local system On-Demand Scan task and the Update task. This is done according to the schedule configured locally on each protected device in the administration group:
If the scheduled start of a specific type of local system task is prohibited by a policy, these tasks will not be performed on the protected device according to the schedule. You can start local system tasks manually.
If the scheduled start of a specific type of local system task is allowed by a policy, these tasks will be performed in accordance with the scheduled parameters configured locally for this task.
By default, starting of local system tasks is prohibited by policy.
We recommend that you do not allow local system tasks to start if updates or on-demand scans are administered by Kaspersky Security Center group tasks.
If you do not use group update or on-demand scan tasks, allow local system tasks to be started in the policy: Kaspersky Industrial CyberSecurity for Nodes will perform application database and module updates, and start all local system on-demand scan tasks in accordance with the default schedule.
You can use policies to allow or block the scheduled start of the following local system tasks:
On-Demand Scan tasks: Critical Areas Scan, Scan at Operating System Startup, Application Integrity Control, Baseline System Integrity Monitor.
Update tasks: Update of databases and application modules, Application update.
If the protected device is excluded from the administration group, the local system tasks schedule will be enabled automatically.
To allow or block startup schedule management for the application local tasks in a policy:
In the Kaspersky Security Center Administration Console tree, expand the Managed devices node, expand the relevant group, and in the results pane, select the Policies tab.
On the Policies tab, in the context menu of the policy for which you want to schedule Kaspersky Industrial CyberSecurity for Nodes local system tasks for the group of protected devices, select Properties.
In the policy properties window, select the Application settings section.
Click Settings in the Run local system tasks subsection.
If the check box is selected, local tasks are displayed in the Kaspersky Industrial CyberSecurity for Nodes local interface. When there are no additional policy restrictions, the user can configure and run tasks. However, configuring task run schedule remains unavailable for the user. The user can run tasks only manually.
If the check box is cleared, use of local tasks is stopped. In this mode, local tasks do not run according to schedule. Tasks cannot be started or configured in the local interface of Kaspersky Industrial CyberSecurity for Nodes, or when working with the command line.
Use the Allow schedule management check box to allow or block startup schedule management for the application local tasks.
The check box is available if the Allow use of local tasks check box is selected.
If the check box is selected, the schedule management becomes available in the local task properties in the Application Console.