|
Concerning to:
Kaspersky Anti-Virus 5.0 for Windows Workstations MP5 (builds 5.0.676 - 5.0.712)
Kaspersky Anti-Virus 5.0 for Windows Workstations MP4 (builds 5.0.527 - 5.0.528)
Kaspersky Anti-Virus 5.0 for Windows Workstations MP3 (builds 5.0.175 - 5.0.228)
Kaspersky Administration Kit 6.0 MP1
Kaspersky Administration Kit 5.0 MP3 (builds 5.0.1104 - 5.0.1152)
In Kaspersky Anti-Virus for Windows Workstations version 5.0.228 and below
In Kaspersky Anti-Virus for Windows Workstations version 5.0.527 and above
In Kaspersky Anti-Virus for Windows Workstations version 5.0.527 and above
In Kaspersky Anti-Virus for Windows Workstations from the version 5.0.527 a new Exit command has been added in the context menu of the Anti-Virus icon. By running this command the application’s interface and its service part are unloaded from the memory.
This menu point is available only to the local administrators of the workstation. So for the users of the client computers not to unload the Anti-Virus on their computers (precisely not to stop tasks of real-time protection) they should not be granted the rights of local administrators on these computers.
For the local administrations not to have access to the Exit command and to the Settings tab (i.e. to the extended interface of the Anti-Virus), set an access password to the administrator’s interface.
1. Open the properties of the policy for Kaspersky anti-Virus 5.0 for Windows Workstations on the Additional tab and click the Passwords button.
2. Check Use password for application protection, set the password and lock it.

In this case even local administrators of the workstations will have to enter a password to get access to the extended interface (the Switch to administrator mode command in the context menu of the Anti-Virus). This setting is applied after reboot.
The password will prevent local administrators and users (who have not been granted access to it) from stopping real-time protection tasks and the Anti-Virus service by means of the operating system.
In Kaspersky Anti-Virus for Windows Workstations version 5.0.228 and below
To prevent the users from uninstalling the Antivirus on their computers (precisely cancel startup of system tasks) users should not have local administrator rights on their computers.
If by some reasons it is impossible to deprive the user of local administrator right, you can "lock" application settings or Predefined tasks in the application policy.
In this case users can not change the Antivirus settings and stop real-time protection tasks, BUT it does not prevent them from stopping service of the Antivirus application, as local administrators have all rights on their computers.

|