Kaspersky Embedded Systems Security for Windows Console window

The Kaspersky Embedded Systems Security for Windows Console is displayed as a node in the Microsoft Management Console tree.

After a connection has been established to Kaspersky Embedded Systems Security for Windows installed on a different protected device, the name of the node is supplemented with the name of the protected device on which the application is installed and the name of the user account under which the connection has been established: Kaspersky Embedded Systems Security for Windows <Name of protected device> as <account name>. When connecting to Kaspersky Embedded Systems Security for Windows installed on the same protected device with the Application Console, the node name is Kaspersky Embedded Systems Security for Windows.

The Application Console tree

The Application Console tree displays the Kaspersky Embedded Systems Security for Windows node and the child nodes of functional components of the application.

The Kaspersky Embedded Systems Security for Windows node includes the following child nodes:

• Real-Time Computer Protection: manages the Real-Time Computer Protection tasks and KSN services. The Real-Time Computer Protection node allows to configure the following tasks:
  • Real-Time File Protection
  • KSN Usage
  • Exploit Prevention
• Computer Control: control of applications running on the protected device and connected devices. The Computer Control node allows to configure the following tasks:
  • Applications Launch Control
  • Device Control
  • Firewall Management
• Automated rule generators: configuring automatic generation of group and system rules for the Applications Launch Control task and the Device Control task.
  • Rule Generator for Applications Launch Control
  • Rule Generator for Device Control
  • Rule generation group tasks <Task names> (if any)

    Group tasks are created using Kaspersky Security Center. You cannot manage group tasks through the Application Console.

• System Inspection: configuring file operations control and Windows Event Log inspection settings.
  • File Integrity Monitor
  • Log Inspection
• On-Demand Scan: manages On-Demand Scan tasks. There is a separate node for each task:
  • Scan at Operating System Startup
  • Critical Areas Scan
  • Quarantine Scan
  • Application Integrity Control
  • Custom tasks <Task names> (if any)

  The node displays system tasks created when the application is installed, custom tasks, and group on-demand scan tasks created and sent to a protected device using Kaspersky Security Center.

• Update: manages updates for Kaspersky Embedded Systems Security for Windows databases and modules and copies the update to a local update source folder. The node contains child nodes for administering each update task and the last Rollback of Application Database Update task:
  • Database Update
  • Software Modules Update
  • Copying Updates
  • Rollback of Application Database Update

  The node displays all custom and group update tasks created and sent to a protected device using Kaspersky Security Center.

• Storages: Management of Quarantine and Backup settings.
  • Quarantine
  • Backup
• Logs and notifications: manages local task logs, Security log and Kaspersky Embedded Systems Security for Windows System audit log.
  • Security log
  • System audit log
  • Task logs
• Licensing: add or delete Kaspersky Embedded Systems Security for Windows keys, view license details.

Details pane

The details pane displays information about the selected node. If the Kaspersky Embedded Systems Security for Windows node is selected, the details pane displays information about the current device protection status and information about Kaspersky Embedded Systems Security for Windows, the protection status of its functional components, and the license expiration date.

Context menu of the Kaspersky Embedded Systems Security for Windows node

You can use the items of the context menu of the Kaspersky Embedded Systems Security for Windows node to perform the following operations:

• Connect to another computer. Connect to another device to manage Kaspersky Embedded Systems Security for Windows installed on it. You can also perform this operation by clicking the link in the lower right corner of the details pane of the Kaspersky Embedded Systems Security for Windows node.
• Start the service / Stop the service. Start or stop application or a selected task. To carry out these operations, you can also use the buttons on the toolbar. You can also perform these operations in context menus of application tasks.
• Configure removable drives scan settings. Configure scanning of removable drives connected to the protected device via the USB port.

• Configure Trusted Zone settings. View and configure Trusted Zone settings.
• Modify user rights of application management. View and configure permissions to access Kaspersky Embedded Systems Security for Windows functions.
• Modify user rights of Kaspersky Security Service management. View and configure user rights to manage Kaspersky Security Service.
• Export settings. Save the application settings in a configuration file in XML format. You can also perform this operation in context menus of application tasks.
• Import settings. Import application settings from a configuration file in XML format. You can also perform this operation in context menus of application tasks.
• Information about the application and available module updates. See information about Kaspersky Embedded Systems Security for Windows and currently available software module updates.
• Refresh. Refresh the contents of the Application Console window. You can also perform this operation in context menus of application tasks.
• Properties. View and configure settings of Kaspersky Embedded Systems Security for Windows or a selected task. You can also perform this operation in context menus of application tasks.

  To do so, you can also use the Application properties link in the details pane of the Kaspersky Embedded Systems Security for Windows node or use the button on the toolbar.

• Help. View information in Kaspersky Embedded Systems Security for Windows Help. You can also perform this operation in context menus of application tasks.

Toolbar and context menu of Kaspersky Embedded Systems Security for Windows tasks

You can manage Kaspersky Embedded Systems Security for Windows tasks using the context menus of each task in the Application Console tree.

You can use the items of the context menu to perform the following operations:

• Start / Stop. Start or stop task execution. To carry out these operations, you can also use the buttons on the toolbar.
• Resume / Pause. Resume or pause task execution. To carry out these operations, you can also use the buttons on the toolbar. This operation is available for the Real-Time Computer Protection tasks and the On-Demand Scan tasks.
• Add task. Create new custom task. This operation is available for On-demand scan tasks.
• Open log. View and manage the task log. This operation is available for all tasks.
• Remove task. Delete custom task. This operation is available for On-demand scan tasks.
• Settings templates. Manage templates. This operation is available for Real-Time File Protection and On-Demand Scan.