Configuring the Registry Access Monitor task settings

To configure the settings of the Registry Access Monitor task using the Administration Plug-in:

1. Expand the Managed devices node in the Kaspersky Security Center Administration Console tree.
2. Select the administration group for which you want to configure application settings.
3. Perform one of the following actions in the details pane of the selected administration group:
   • To configure application settings for a group of protected devices, select the Policies tab and open the Properties: <Policy name> window.
   • To configure the settings of a task or application for an individual protected device, select the Devices tab and go to local task settings or application settings.
4. In the System inspection section, in the Registry Access Monitor block, click the Settings button.

   The Registry Access Monitor window appears.

5. On the Registry Access Monitor settings tab, in the Task mode block, select the required option from the list:
   • Block operations according to the rules

     If you select the Block operations according to the rules mode, Kaspersky Embedded Systems Security for Windows blocks the Actions defined for the monitoring scope.

     By default, the Statistics only mode is applied.

   • Statistics only.

     If the Statistics only mode is selected for the monitoring scope, Kaspersky Embedded Systems Security for Windows compiles the statistics for registry key actions according the configured rules.

     By default, the Statistics only mode is applied.

6. Add registry access monitoring rules that will determine what the task does.
7. On the Task management tab, configure the task start schedule settings.
8. Click the OK button to save the changes.

Kaspersky Embedded Systems Security for Windows applies the new settings to the running task. Information about the date and time of settings modification are saved in the system audit log.