Managing profiles

If a corporate network includes several Microsoft Exchange servers with the application installed, you may need to manage the application settings in a group of servers simultaneously. For example, these may be Microsoft Exchange servers with identical security requirements. To manage identical settings in a group of Security Servers, Kaspersky Security provides profiles. A profile is a set of identical settings applied to several Security Servers at once. Using profiles allows you to configure identical settings for all Security Servers of the same type simultaneously and to avoid the hassle of configuring each Security Server separately.

Profiles can be useful in the following cases:

• There are several Microsoft Exchange servers with the application on the corporate network and you need to manage these servers in the same way. In this case, you can create a single profile, add all Security Servers to this profile, and configure application settings in the profile.
• There are two or more groups of Security Servers on the corporate network, and you need to configure different settings for these groups. In this case, the following profile usage options are possible:
  • You can use profile roles to configure selective access of users to Security Servers management.
  • If each group includes more than one Security Server, you can create several profiles with different settings and add different Security Servers to them.
  • If one of the Security Servers requires custom settings, you can create a profile for a group of servers with identical settings and use the created profiles to configure the settings of these servers. For a Security Server that is not part of a group, you can configure its settings individually instead of creating a profile. A Security Server that is not included in any profile is called an unassigned Security Server. You can configure an unassigned Security Server individually in the node of that Security Server.

Using profiles is optional. You can also configure the settings of Security Servers separately in the node of each Security Server.

If a company has multiple sites, allowance should be made for replication delays when creating and editing profiles, since the application stores profile information in Active Directory.

Only administrators from the Kse Administrators group in Active Directory can create/delete profiles, add/delete Security Servers from profiles, and configure access to profiles.

To use profiles, perform the following:

1. Create profile.
2. Configure profile settings.
3. Add Security Servers to profile.
4. Configure access to profile.

The Security Server settings may be unavailable for editing if the Security Server has been added to a profile and inherits the profile settings. The "lock" symbol appears next to the setting that cannot be edited. To be able to configure Security Server settings that differ from profile settings, remove the Security Server from the profile.

You can create an unlimited number of profiles and add Security Servers to them or remove Security Servers from profiles at your own discretion.

You may need to remove a Security Server from the profile, for example, in the following cases:

• If you need to specify Security Server settings that differ from those of a profile.
• If you need to add a Security Server to another profile (in this case, you should first remove the Security Server from the profile to which it was previously added).

If you no longer need an existing profile, you can remove that profile from the application configuration.