Configuring the File Integrity Monitor task

To configure general File Integrity Monitor task settings, perform the following steps:

1. Expand the Managed devices node in the Kaspersky Security Center Administration Console tree.
2. Select the administration group for which you want to configure application settings.
3. Perform one of the following actions in the details pane of the selected administration group:
   • To configure application settings for a group of protected devices, select the Policies tab and open the Properties: <Policy name> window.
   • To configure the application for a single protected device, select the Devices tab and open the Application settings window.

     If an active Kaspersky Security Center policy is applied to a device and blocks changes to application settings, then these settings cannot be edited in the Application settings window.

4. In the System inspection section in the File Integrity Monitor subsection, click the Settings button.

   The File Integrity Monitor window opens.

5. In the File operations monitoring settings tab in the window that opens, configure the following settings:
   1. Clear or select the Log information about file operations that appear during the monitoring interruption period check box.
      

      The check box enables or disables monitoring of the file operations specified in the File Integrity Monitor task settings when the task is not running for any reason (removal of a hard disk, task stopped by user, software error).

      If the check box is selected, Kaspersky Security for Windows Server will record events in all monitoring scopes when the File Integrity Monitor task is not running.

      If the check box is cleared, the application will not log file operations in monitoring scopes when the task is not running.

      The check box is selected by default.

   2. Clear or select the Block attempts to compromise the USN log check box.
      

      The check box enables or disables protection of the USN log.

      If the check box is selected, Kaspersky Security for Windows Server will block attempts to delete the USN log or to compromise the USN log's content.

      If the check box is cleared, the application will not monitor changes to the USN log.

      The check box is selected by default.

   3. Add the monitoring scopes to be monitored by the task.
6. On the Task management tab, configure the task settings for starting the task on a schedule.
7. Click OK to save the changes.