Adding trusted processes

To add one or more processes to the list of trusted processes:

1. Open the Trusted Zone window.
2. Select the Trusted processes tab.
3. Select the Do not check file backup operations check box to skip scanning of file read operations.
   

   The check box enables or disables the scanning of file read operations if such operations are performed by backup tools installed on the protected device.

   If the check box is selected, Kaspersky Security for Windows Server skips file read operations performed by backup tools installed on the protected device.

   If the check box is cleared, Kaspersky Security for Windows Server scans file read operations performed by backup tools installed on the protected device.

   The check box is selected by default.

4. Select the Do not check file activity of the specified processes check box to skip file operation scanning for trusted processes.
   

   The check box enables or disables the scanning of file activity of trusted processes.

   If the check box is selected, Kaspersky Security for Windows Server skips operations of trusted processes during scanning.

   If the check box is cleared, Kaspersky Security for Windows Server scans file operations of trusted processes.

   The check box is cleared by default.

5. Click the Add button.
6. In the button's context menu, select one of the options:
   • Multiple processes.

     In the Adding trusted processes window that opens, configure the following:

     1. Use full process path on disk to consider it trusted.
        

        If this option is selected, Kaspersky Security for Windows Server uses the full path to the file to determine whether the process is trusted.

     2. Use process file hash to consider it trusted.
        

        If the check box is selected, Kaspersky Security for Windows Server uses the selected file's hash to determine the process's trust status.

        If the check box is cleared, the file hash is not used to determine the process's trust status.

        The check box is selected by default.

     3. Click the Browse button to add data based on executable processes.
     4. Select an executable file in the window that opens.

        You can only add one executable file at a time. Repeat steps c-d to add other executable files.

     5. Click the Processes button to add data based on running processes.
     6. Select processes in the window that opens. To select multiple processes, press and hold the CTRL button while selecting.
     7. Click OK.

        The account under which the Real-Time File Protection task is run must have administrator rights on the device with Kaspersky Security for Windows Server installed in order to allow viewing of the list of active processes. You can sort processes in the list of active processes by file name, process identifier (PID), or path to the executable file of the process on the protected device. Note, that you can select running processes by clicking the Processes button only using the Application Console on a protected device or in the specified host settings via the Kaspersky Security Center.

   • One process based on file name and path.

     In the Adding a process window that opens, do the following:

     1. Enter a path to an executable file (including the file name).

        When specifying the objects, you can use names masks (via ? and * characters) and all types of environment variables. The resolving of environment variables (replacing variables with their values) is performed by Kaspersky Security for Windows Server when starting a task, or when applying new settings to a running task (not applicable to On-Demand Scan tasks). Kaspersky Security for Windows Server resolves environment variables under the account used to start the task. For more information on environment variables, refer to the Microsoft Knowledge Base.

     2. Click OK.
   • One process based on object properties.

     In the Trusted process adding window that opens, configure the following:

     1. Click the Browse button to select a process.
     2. Use full process path on disk to consider it trusted.
     3. Use process file hash to consider it trusted.
     4. Click OK.

     To add the selected process to the list of trusted processes, at least one trust criterion must be selected.

7. In the Trusted Zone window, click the OK button.

The selected file or process will be added to the list of trusted processes in the Trusted Zone window.