Hamid Ali

Dear Support, I am trying to block Skype application (by default installed with Windows 10) using Application control. I have created condition using all Application registry and Executable files and even using metadeta with Application Name= Skype, but still somehow its not blocking it. I have also tried creating condition with SkypeApp.exe which is showing in the Task Manager but still its not blocking. Can you please guide on this. Thanks

Unfortunately, there is no way to limit the amount of events. Dear Support, Thanks for the response. Ok got it, is there any way to stop following category event only for this notification only: "Device\Device category: Data bus" Other than this category i want this event to be enabled, please guide, Thanks

Dear Support, Thanks for the info, actually i want this event to be stored in KSC so that it could be exported to SIEM. The issue is that there are similar kind of same event multiple time registered on KSC, is there any way to limit this event ? I mean i dont want the same event from the following category: "Device\Device category: Data bus" Thanks

Dear Support, There is an event which is appearing as follow: Event "Operation with the device allowed" occurred on device ********* in Windows domain *********** on Friday, June 14, 2019 3:26:43 PM (GMT+05:00) Event type: Operation with the device allowed Device\Device category: Data bus Device\Device type/Bus type: USB User: ************ (Not defined) Result\Decision: Allow Result\Operation: Connect Could you please guide how to stop this event for "Data bus" only as its indicating above. there is no option is Event Notification in policy settings, please guide. Thanks

Dear support, Ok got it. Thanks for the support.

Dear Support, Waiting for your response. Thanks

Dear Support, Thanks for the info, Just need to ask that i have configured a "SUBNET" as a scope for distribution point, and as snapshots are attached in earlier threads it can be seen that its not working, and in the kaspersky article it is written that "If the administrator manually assigns distribution points, they can only be assigned according to administration groups". So please guide that if SUBNET is defined as scope for distribution point, it will not work according to the above statement ? Thanks

Dear Support, Waiting for your kind response. Thanks

Dear Support, Waiting for your kind response. Thanks

Dear Support, In guide its written "If the administrator manually assigns distribution points, they can only be assigned according to administration groups" Does this mean that if we assign distribution point manually, the scope should be administration group not a "SUBNET" ? Is it ? Thanks

Thanks for the prompt response. This means that Distribution Point / Update Agent can be used for Windows/Third party update installation. 1 more thing wanted to confirm, i have assigned Distribution Point and selected a subnet for its scope, but after verification, subnet is entered correctly but there is no distribution point in the tab (snapshot attached). Please guide. Thanks

Dear Support, Greetings, I have assigned Distribution Point / Update Agent in KSC with its Scope settings. I want to achieve that when I install Windows Update / third party update task. Is it possible to run Windows Update / third party update task through Distribution Point / Update Agent ? Please guide on this. Thanks

Dear Support, Thanks for the prompt response. Let me rephrase. There are 100 devices in Managed groups. I want to search a specific device with IP address 10.0.0.10. Where should i go to find this device ? Thanks please

Hello! Can you please describe what kind of search do you need to perform (better with the screenshot). Thank you! Dear Support, I want to search a device with IP address ? Thanks

Dear Support, Greetings, Just started using KSC 11 Web console, a better and improved UI as compared to that of KSC 10.5, but there is problem that i cant find Device Search by IP Address, instead it can only search device by DNS, Host name. Is it a limitation of KSC 11 Web console or is there any way to find device by IP address ? Thanks

Dear Nikolay, Thanks for the support.

Dear Support, Thanks for the response. Ok i mean if there is any script or cron job type utility which just sends device status to KSC or Email server which is configured in KSC server ? is it possible ? Thanks

Dear Support, Greetings, There are Laptop devices which are out of office and connected to other networks upon mobility. Obviously KSC shows Network Agent as inactive as the device is not connected to KSC. The question is that is there any way to periodically get the status of these devices ? I mean any utility or any other method to do so ? Thanks

Dear Support, Can anyone guide me on FDE, a device is encrypted with FDE and after complete encryption whenever the system is started it prompts PRE BOOT AUTHENTICATION to only authentic accounts. The issue is that after logging in to OS, when we SWITCH USER it easily logs in other domain account which is unauthorized account. Kindly guide why is this happening and how to avoid it ? Thanks

This means in fact that there was actually no option to display and edit reports in KSC 10 only. Just install the new KSC 11 on a new server and install the new Network Agents from there (as I said, we didn't do an in-place upgrade, but of course you can do that, too). Then you have the possibility to grant permission for reports and test the KSC 11 first instead of using it productively. Have a nice week, Leon Dear Leon, Thank you very much for your interest and help in this regard. Appreciated !!!

Dear Leon, Perfectly demonstrated. Thanks Yeah you said it right that by giving MODIFY rights can achieve my target to change the options of report, but this also allow the user to modify admin server components. So as mentioned by you "Either you trust the user and give him or her permission to edit objects or you leave it at "read-only". So i have to choose between these. So this means there is no other option than this ? Except i can upgrade to KSC 11. Thanks

Thank you very much and highly appreciated efforts and passion of yours (Y) . I know its not easy to volunteer but your interest and passion is great. Surely you can take your time for this query i can wait for this. Thanks

Dear Support, Waiting for your response. Thanks

Thanks for the response. I would highly appreciate if you could please specify which roles and permissions should be used to grant access to Generate reports only and change the settings of report. Thank you very much !!

Thank you very much for your response. I reckon this feature options are for KSC 11. Could you please guide me according to KSC 10.5. Thanks