Enabling the Default Allow mode

Default Allow mode allows all applications to start if they are not blocked by rules or by a conclusion from KSN that they are not trusted. Default Allow mode can be enabled by adding specific allowing rules. You can enable Default Allow for only scripts or for all executable files.

To add a Default Allow rule:

1. Open the Applications Launch Control rules window.
2. Click the Add button and, in the button’s context menu, select Add one rule.

   The Rule settings window opens.

3. In the Name field, enter the name of the rule.
4. In the Type drop-down list, select the Allowing rule type.
5. In the Scope drop-down list, select the type of files whose execution will be controlled by the rule:
   • Executable files if you want the rule to control the launch of executable files.
   • Scripts and MSI packages if you want the rule to control the launch of scripts and MSI packages.
6. In the Rule triggering criterion group box, select the Path to file option.
7. Enter the following mask: ?:\
8. Click OK in the Rule settings window.

Kaspersky Security for Windows Server applies the Default Allow mode.