Creating a scan scope

If you are remotely managing Kaspersky Embedded Systems Security for Windows on the protected device using the Application Console installed on an administrator's workstation, you must be a member of administrators group on the protected device to be able to view folders on it.

The names of settings may vary depending on the installed Windows operating system.

If you modify the scan scope in the Scan at Operating System Startup and Critical Areas Scan tasks, you can restore the default scan scope in these tasks by repairing Kaspersky Embedded Systems Security for Windows itself (Start > Programs > Kaspersky Embedded Systems Security for Windows > Modify or Remove Kaspersky Embedded Systems Security for Windows). In the setup wizard, select Repair installed components and click Next. Then select the Restore recommended application settings check box.

The procedure of creating an On-Demand Scan task scope depends on the selected view of network file resources. You can configure the view of network file resources as a tree or as a list (default view).

To create a scan scope using the network file resource tree:

1. Open the Scan scope settings window.
2. In the left section of the window, open the network file resource tree to display all the nodes and child nodes.
3. Do the following:
   • To exclude individual nodes from the scan scope, clear the check boxes next to the names of these nodes.
   • To include individual nodes in the scan scope, clear the My Computer check box and do the following:
     • If all drives of a particular type are to be included in the scan scope, select the check box next to the name of the required drive type (for example, to add all removable drives on the protected device, select the Removable drives check box).
     • If an individual drive of a particular type is to be included in the scan scope, expand the node that contains drives of that type and select the check box next to the name of the required drive. For example, to select the removable drive F:, expand the Removable drives node and select the check box for the F: drive.
     • If you would like to include only a single folder or file on the drive, select the check box next to the name of that folder or file.
4. Click the Save button.

The Scan scope settings window will be closed. The newly configured settings are saved.

To create a scan scope using the network file resource list:

1. Open the Scan scope settings window.
2. To include individual nodes in the scan scope, clear the My Computer check box and do the following:
   1. Open the context menu on the scan scope by right-clicking it.
   2. In the context menu of the button, select Add scan scope.
   3. In the opened Add scan scope window, select the type of object that you want to add:
      • Predefined scope, if you want the scan scope to include one of the predefined scopes on the protected device. Then in the drop-down list, select the desired scan scope.
      • Disk, folder or network location – to include an individual drive, folder or network object in the scan scope. Then select the desired scope by clicking the Browse button.
      • File – to include an individual file in the scan scope. Then select the desired scope by clicking the Browse button.

      You cannot add an object to a scan scope if it has already been added as an exclusion from scan scope.

3. To exclude individual nodes from the scan scope, clear the check boxes next to the names of these nodes or take the following steps:
   1. Open the context menu on the scan scope by right-clicking it.
   2. In the context menu, select the Add exclusion option.
   3. In the Add exclusion window, select an object type that you want to add as an exclusion from the scan scope following the procedure used when adding an object to the scan scope.
4. To modify the scan scope or an exclusion added, select the Edit scope option in the context menu for the necessary scan scope.
5. To hide a previously added scan scope or exclusion in the list of network file resources, select the Remove from the list option in the context menu for the necessary scan scope.

   The scan scope is excluded from the On-Demand Scan task scope when it is removed from the network file resource list.

6. Click the Save button.

The Scan scope settings window will be closed. The newly configured settings are saved.