Creating the protection scope

The following types of protection scopes are applied in the Anti-Cryptor task:

• Predefined. You can use the default protection scope, which includes all the device's shared network folders in the scan. Applied if the All shared network folders on the server setting is selected.
• User. You can manually configure the protection scope by selecting the folders that need to be included in the encryption protection scope. Applied if the Only specified shared folders setting is selected.

You can only use a local path to configure the protection scope for the Anti-Cryptor task.

When using either a predefined or user protection scope, you can exclude selected folders from the protection scope, for example, if data in these folders is encrypted by programs installed on remote devices.

To configure a protection scope for the Anti-Cryptor task:

1. In the main window of the Web Console, select Devices → Policies & profiles.
2. Click the policy name you want to configure.
3. In the <Policy name> window that opens select the Application settings tab.
4. Select the Network activity control section.
5. Click Settings in the Anti-Cryptor subsection.
6. On the Protection scope tab, select the folders that Kaspersky Security for Windows Server will scan when executing the Anti-Cryptor task:
   • All shared network folders on the server.
     

     If this option is selected, when the Anti-Cryptor task is executed, Kaspersky Security for Windows Server scans all the protected device's shared folders.

     This option is selected by default.

   • Only specified shared folders.
     

     If this option is selected, during execution of the Anti-Cryptor task Kaspersky Security for Windows Server protects only the device's shared folders that you specify manually.

7. To specify the device's shared folders, that you want to include in the encryption protection scope:
   1. Select Only specified shared folders and click the Add button.
   2. In the pane on the right specify the path to a folder.
   3. Click OK.
8. Click OK to apply the new configuration.

The specified settings are saved.