Enabling and disabling Device Control

By default, Device Control is enabled. You can disable Device Control, if necessary.

To enable or disable Device Control in Kaspersky Security Center:

1. Open Kaspersky Security Center Administration Console.
2. In the Managed devices folder of the console tree, open the folder with the name of the administration group to which the relevant protected virtual machines belong.
3. In the workspace, select the Policies tab.
4. Select a Light Agent for Windows policy in the list of policies and open the Properties: <Policy name> by double-clicking.
5. In the policy properties window, select the Device Control section in the list on the left.
6. In the right part of the window, do one of the following:
   • If you want to enable Device Control component, select the Device Control check box.
   • If you want to disable Device Control component, clear the Device Control check box.
7. Click the Apply button.

In the local interface of Light Agent for Windows, you can enable or disable a component in two ways:

• On the Protection and Control tab of the main application window.
• From the application settings window.

To enable or disable Device Control on the Protection and Control tab of the main application window:

1. On the protected virtual machine, open the main application window.
2. Select the Protection and Control tab.
3. Open the Endpoint control section.
4. Open the context menu of the Device Control item and perform one of the following actions:
   • To enable Device Control, select Enable in the menu.
   • To disable Device Control, select Disable in the menu.

   If this menu item is unavailable, this means that you cannot enable or disable this component because the policy-defined setting is applied to protected virtual machines within the administration group.

To enable or disable Device Control from the application settings window:

1. On the protected virtual machine, open the application settings window.
2. In the left part of the window, in the Endpoint control section, select Device Control.

   In the right part of the window, the Device Control component's settings are displayed.

   If component settings are unavailable, this means that you cannot enable or disable this component because the policy-defined setting is applied to protected virtual machines within the administration group.

3. Do one of the following:
   • If you want to enable Device Control component, select the Enable Device Control check box.
   • If you want to disable Device Control component, clear the Enable Device Control check box.
4. To save changes, click the Save button.