Creating a policy

To create a policy for a group of protected devices where application is installed and running:

1. Expand the Managed devices node in the Kaspersky Security Center Administration Console tree, then select the administration group containing the protected devices for which you wish to create a policy.
2. In the details pane of the selected administration group, select the Policies tab and click the Create a policy link to start the wizard and create a policy.

   The New Policy Wizard window opens.

3. In the Select the application for which you want to create a group policy window, select Kaspersky Embedded Systems Security for Windows and click Next.
4. Enter a group policy name in the Name field.

   The policy name cannot contain the following symbols: " * < : > ? \ | .

5. To apply a policy configuration used in a previous version of the application:
   1. Select the Use settings from policy for previous versions of application check box.
   2. Click the Browse button.
   3. Select the policy you want to apply.
   4. Click the Next button.
6. In the Operation type selection window, in the Policy creation method block, select one of the following options:
   • New, to create a new policy with default settings.
   • Import policy created with previous versions of Kaspersky Embedded Systems Security for Windows, to use the imported policy as a template.
7. In the Real-Time Computer Protection window, configure the application components:
   1. If necessary, change the default settings of the Real-Time Computer Protection components:
      1. Click Settings in the component subsection.
      2. In the window that opens, configure the component settings:
      3. Click the OK button.
   2. Allow or block the application of the settings of Real-Time Computer Protection components on protected devices in the network:
      • Click the button to allow configuration of the application component settings on protected devices in the network and to block the application of the application component settings configured in the policy.
      • Click the button to block the configuration of the application component settings on protected devices in the network and to allow the application component settings configured in the policy to be applied.
   3. Click the Next button.
8. Select one of the following policy statuses in the Create the group policy for the application window:
   • Active policy, if you want to apply the policy immediately after it is created. If an active policy already exists in the group, it is deactivated and a new policy is applied.
   • Inactive policy if you do not want to apply the created policy immediately. In this case the policy may be activated later.
   • Select the Open policy properties immediately after they are created check box to automatically close the New Policy Wizard and configure the newly created policy after clicking the Next button.
9. Click the Finish button.

The created policy appears in the list of policies on the Policies tab of the selected administration group. In the Properties: <Policy name> window, you can configure other settings, tasks and functions of Kaspersky Embedded Systems Security for Windows.