Hi All,
Currently I'm using:
- Kaspersky Administration Kit 6.0.1710
with clients:
- Kaspersky Anti Virus 6.0.3.837

I've been able to set password in the group policy, so client won't be able to stop / modify any Local settings unless supplying the correct password:
- Create KAV policy:

• Enforcement: Modify all policy settings to the local settings at first policy application (note: I think this is confusing, rewording would be nice...)
• Policy Settings:
  1. Scan - LOCKED for both "Security Level" and "Action"
  2. Service - LOCKED and TICKED the following options:
     • "Enable self defense"
     • "Disable external service control"
     • "Enable uninstall protection"
     • "Enable password protection"
     1. Saving program settings
     2. Exiting the program
     3. Stopping / pausing protection components or virus scan tasks

Now, using the above settings, client won't be able to change any of local settings unless supplying the correct password, which is what I want.
BUT, they also cannot stop any manual scan they runs. as it keeps asking for the password, which I set from Stopping / pausing protection components or virus scan tasks.

Is there any way I can allow them start/stop manual scanning, but disallow them to start/stop/changing any protection components or stopping scheduled scanning task?

Thank you!