Managing tasks

Kaspersky Security Center manages applications installed on devices, by creating and running various tasks. Tasks are required for installing, launching, and stopping applications, scanning files, updating databases and software modules, and performing other actions on applications.

Tasks are subdivided into the following types:

• Group tasks. Tasks that are performed on the devices of the selected administration group.
• Administration Server tasks. Tasks that are performed on the Administration Server.
• Tasks for specific devices. Tasks that are performed on selected devices, regardless of whether they are included in any administration groups.
• Local tasks. Tasks that are performed on a specific device.

An application task can only be created if the management plug-in for that application is installed on the administrator's workstation.

You can compile a list of devices for which a task will be created by in one of the following ways:

• By selecting networked devices discovered by Administration Server.
• By specifying a list of devices manually. You can use an IP address (or IP range), NetBIOS name, or DNS name as the device address.
• Import a list of devices from a .txt file containing the addresses of devices to be added (each address must be placed in an individual line).

  If you import a list of devices from a file or create one manually, and devices are identified by their names, the list can only contain devices for which information has already been entered into the Administration Server database when those devices were connected or during device discovery.

For each application, you can create any number of group tasks, tasks for specific devices, or local tasks.

The exchange of task information between an application installed on a device and the Kaspersky Security Center database is carried out when Network Agent is connected to Administration Server.

You can make changes to the settings of tasks, view the progress of tasks, and copy, export, import, and delete tasks.

Tasks are started on a device only if the application for which the task was created is running. When the application is not running, all running tasks are canceled.

Results of completed tasks are saved in the event logs of Microsoft Windows and Kaspersky Security Center, both centrally on the Administration Server and locally on each device.

Do not include private data in task settings. For example, avoid specifying the domain administrator password.

Details of managing tasks for applications with multitenancy support

A group task for an application with multitenancy support is applied to the application depending on the hierarchy of Administration Servers and client devices. The virtual Administration Server from which the task is created must be in the same or a lower-level administration group than the client device on which the application is installed.

In events that correspond to task execution results, a service provider administrator is shown the information about the device on which the task executed. By contrast, a tenant administration is shown Multi-tenant node.

Creating a task

In Administration Console, you can create tasks directly in the folder of the administration group for which a group task is to be created, or in the workspace of the Tasks folder.

To create a group task in the folder of an administration group:

1. In the console tree, select the administration group for which you want to create a task.
2. In the group workspace, select the Tasks tab.
3. Run the task creation by clicking the Create a task button.

The Add Task Wizard starts. Follow the instructions of the Wizard.

To create a task in the workspace of the Tasks folder:

1. In the console tree, select the Tasks folder.
2. Run the task creation by clicking the Finish button.

The Add Task Wizard starts. Follow the instructions of the Wizard.

Do not include private data in task settings. For example, avoid specifying the domain administrator password.

Creating the Administration Server task

The Administration Server performs the following tasks:

• Automatic distribution of reports
• Downloading of updates to the repository of the Administration Server
• Backup of Administration Server data
• Maintenance of the database
• Windows Update synchronization
• Creation of an installation package based on the operating system (OS) image of a reference device

On a virtual Administration Server, only the automatic report delivery task and the installation package creation task based on the reference device OS image are available. The repository of the virtual Administration Server displays updates downloaded to the primary Administration Server. Backup of virtual Administration Server data is performed together with backup of primary Administration Server data.

To create the Administration Server task:

1. In the console tree, select the Tasks folder.
2. Start creation of the task in one of the following ways:
   • By selecting New → Task in the context menu of the Tasks folder in the console tree.
   • By clicking the Create a task button in the workspace of the Tasks folder.

The Add Task Wizard starts. Follow the instructions of the Wizard.

The Download updates to the repository of the Administration Server, Perform Windows Update synchronization, Database maintenance, and Backup of Administration Server data tasks can be created only once. If the Download updates to the repository of the Administration Server, Database maintenance, Backup of Administration Server data, and Perform Windows Update synchronization tasks have already been created for the Administration Server, they will not be displayed in the task type selection window of the Add Task Wizard.

Creating a task for specific devices

In Kaspersky Security Center, you can create tasks for specific devices. Devices that are in a set can be included in various administration groups or remain outside any administration groups. Kaspersky Security Center can perform the following main tasks for specific devices:

• Install an application remotely
• Send message to user
• Change the Administration Server
• Manage devices
• Verify updates
• Distribute installation packages
• Install application on secondary Administration Servers remotely
• Uninstall an application remotely

To create a task for specific devices:

1. In the console tree, select the Tasks folder.
2. Start creation of the task in one of the following ways:
   • By selecting New → Task in the context menu of the Tasks folder in the console tree.
   • By clicking the Create a task button in the workspace of the Tasks folder.

The Add Task Wizard starts. Follow the instructions of the Wizard.

Creating a local task

To create a local task for a device:

1. Select the Devices tab in the workspace of the group that includes the device.
2. From the list of devices on the Devices tab, select the device for which a local task must be created.
3. Start creating the task for the selected device in one of the following ways:
   • Click the Perform action button and select Create a task in the drop-down list.
   • Click the Create a task link in the workspace of the device.
   • Use the device properties as follows:
     1. In the context menu of the device, select Properties.
     2. In the device properties window that opens, select the Tasks section and click Add.

The Add Task Wizard starts. Follow the instructions of the Wizard.

Detailed instructions on how to create and configure local tasks are provided in the Guides for the respective Kaspersky applications.

Displaying an inherited group task in the workspace of a nested group

To enable the display of inherited tasks of a nested group in the workspace:

1. Select the Tasks tab in the workspace of a nested group.
2. In the workspace of the Tasks tab, click the Show inherited tasks button.

Inherited tasks are displayed in the list of tasks with one of the following icons:

• —If they were inherited from a group created on the primary Administration Server.
• —If they were inherited from a top-level group.

If the inheritance mode is enabled, inherited tasks can only be edited in the group in which they have been created. Inherited tasks cannot be edited in the group which inherits the tasks.

Automatically turning on devices before starting a task

Kaspersky Security Center doesn't run tasks on devices that are turned off. You can configure Kaspersky Security Center to turn on these devices automatically before starting a task, by using the Wake-on-LAN function.

To configure the automatic turning on of devices before starting a task:

1. In the task properties window, select the Schedule section.
2. To configure actions on devices, click the Advanced link.
3. In the Advanced window that opens, select the Activate the device before the task is started through Wake-on-LAN (min) check box, and then specify the time interval in minutes.

As a result, for the specified number of minutes before starting the task, Kaspersky Security Center turns on the devices and loads the operating system on them by using the Wake-on-LAN function. After the task is completed, the devices are automatically shut down if device users don't log in to the system. Note that Kaspersky Security Center automatically shuts down only the devices that are turned on by using the Wake-on-LAN function.

Kaspersky Security Center can start operating systems automatically only on the devices that support the Wake-on-LAN (WoL) standard.

Automatically turning off a device after a task is completed

Kaspersky Security Center allows you to configure a task in such a way that the devices to which it is distributed are automatically turned off after the task completes.

To automatically turn off a device after a task is complete:

1. In the task properties window, select the Schedule section.
2. Click the Advanced link to open the window for configuring actions on devices.
3. In the Advanced window that opens, select the Shut down device when task is complete check box.

Limiting task run time

To limit the time during which a task is run on devices:

1. In the task properties window, select the Schedule section.
2. Open the window intended for configuration of actions on client devices, by clicking Advanced.
3. In the Advanced window that opens, select the Stop if the task is taking longer than (min) check box and specify the time interval in minutes.

If the task is not yet complete on the device when the specified time interval expires, Kaspersky Security Center stops the task automatically.

Exporting a task

You can export group tasks and tasks for specific devices to a file. Administration Server tasks and local tasks are not available for export.

To export a task:

1. In the context menu of the task, select All tasks → Export.
2. In the Save as window that opens, specify the file name path.
3. Click the Save button.

The rights of local users are not exported.

Importing a task

You can import group tasks and tasks for specific devices. Administration Server tasks and local tasks are not available for import.

To import a task:

1. Select the list to which the task must be imported:
   • If you want to import the task to the list of group tasks, in the workspace of the relevant administration group select the Tasks tab.
   • If you want to import a task to the list of tasks for specific devices, select the Tasks folder in the console tree.
2. Select one of the following options to import the task:
   • In the context menu of the list of tasks, select All tasks → Import.
   • Click the Import task from file link in the task list management block.
3. In the window that opens, specify the path to the file from which you want to import a task.
4. Click the Open button.

The task is displayed in the list of tasks.

If the newly imported task has an identical name to an existing task, the name of the imported task is expanded with the (<next sequence number>) index, for example: (1), (2).

Converting tasks

You can use Kaspersky Security Center to convert tasks from earlier versions of Kaspersky applications into those from up-to-date versions of the applications.

Conversion is available for tasks of the following applications:

• Kaspersky Anti-Virus 6.0 for Windows Workstations MP4
• Kaspersky Endpoint Security 8 for Windows
• Kaspersky Endpoint Security 10 for Windows

To convert tasks:

1. In the console tree, select an Administration Server for which you want to convert tasks.
2. In the Administration Server context menu, select All Tasks → Policies and Tasks Batch Conversion Wizard.

The Policies and Tasks Batch Conversion Wizard starts. Follow the instructions of the Wizard.

After the Wizard completes its operation, new tasks are created that use the settings of tasks from earlier versions of the applications.

Starting and stopping a task manually

You can start and stop tasks manually using either of the following methods: through the context menu of the task, or through the properties window of the client device to which that task has been assigned.

Starting group tasks from the context menu of the device is only allowed to users included in the KLAdmins group.

To start or stop a task from the context menu or the properties window of the task:

1. In the list of tasks, select a task.
2. Start or stop the task in one of the following ways:
   • By selecting Start or Stop in the context menu of the task.
   • By clicking Start or Stop in the General section of the task properties window.

To start or stop a task from the context menu or the properties window of the client device:

1. In the list of devices, select the device.
2. Start or stop the task in one of the following ways:
   • By selecting All tasks → Run Task in the context menu of the device. Select the relevant task from the list of tasks.

     The list of devices to which the task is assigned will be replaced with the device that you have selected. The task starts.

   • By clicking the start button () or stop button () in the Tasks section of the device properties window.

Pausing and resuming a task manually

To pause or resume a running task manually:

1. In the list of tasks, select a task.
2. Pause or resume the task in one of the following ways:
   • By selecting Pause or Resume in the context menu of the task.
   • By selecting the General section in the task properties window and clicking Pause or Resume.

Monitoring task execution

To monitor task execution,

in the task properties window, select the General section.

In the middle part of the General section, the current task status is displayed.

Viewing task run results stored on the Administration Server

Kaspersky Security Center allows you to view the results for group tasks, tasks for specific devices, and Administration Server tasks. No run results can be viewed for local tasks.

To view the task results:

1. In the task properties window, select the General section.
2. Click the Results link to open the Task results window.

Configuring filtering of information about task run results

Kaspersky Security Center allows you to filter information about results for group tasks, tasks for specific devices, and Administration Server tasks. No filtering is available for local tasks.

To set up the filtering of information about task run results:

1. In the task properties window, select the General section.
2. Click the Results link to open the Task results window.

   The upper table contains a list of all devices for which the task is assigned. The lower table displays the results of the task performed on the selected device.

3. Right-click the relevant table to open the context menu and select Filter.
4. In the Set filter window that opens, define the filter settings in the Events, Devices, and Time sections. Click OK.

The Task results window displays information that meets the settings specified in the filter.

Modifying a task. Rolling back changes

To modify a task:

1. In the console tree, select the Tasks folder.
2. In the workspace of the Tasks folder, select a task and proceed to the task properties window using the context menu.
3. Make the relevant changes.

   In the Exclusions from task scope section, you can set up the list of subgroups to which the task is not applied.

4. Click Apply.

The changes made to the task will be saved in the task properties window, in the Revision history section.

You can roll back changes made to a task, if necessary.

To roll back changes made to a task:

1. In the console tree, select the Tasks folder.
2. Select the task in which changes must be rolled back, and proceed to the task properties window using the context menu.
3. In the task properties window, select the Revision history section.
4. In the list of task revisions, select the number of the revision to which you need to roll back changes.
5. Click the Advanced button and select the Roll back value in the drop-down list.

Comparing tasks

You can compare tasks of the same type: for example, you can compare two virus scan tasks, but you cannot compare a virus scan task and an update installation task. After the comparison, you have a report that displays which settings of the tasks match and which settings differ. You can print the task comparison report or save it as a file. You may need task comparison when different units within a company are assigned various tasks of the same type. For example, employees at the accounting department have a task of virus scanning only local disks on their computers, while employees at the sales department communicate with customers so they have a task of scanning both local disks and email. You do not have to view all the task settings to quickly notice such difference; you can simply compare the tasks instead.

Only tasks of the same type can be compared.

Tasks can only be compared in pairs.

You can compare tasks in one of following ways: by selecting one task and comparing it to another, or by comparing any two tasks from the list of tasks.

To select one task and compare it to another:

1. In the console tree, select the Tasks folder.
2. In the workspace of the Tasks folder, select the task that you want to compare to another.
3. In the context menu of the task, select All tasks → Compare to another task.
4. In the Select a task window, select the task for comparison.
5. Click OK.

A report in HTML format that compares the two tasks is displayed.

To compare any two tasks from the list of tasks:

1. In the console tree, select the Tasks folder.
2. In the Tasks folder, in the list of tasks, press the Shift or Ctrl key to select two tasks of the same type.
3. In the context menu, select Compare.

A report in HTML format that compares the selected tasks is displayed.

When tasks are compared, if the passwords differ, asterisks (******) are displayed in the task comparison report.

If the password has been changed in the task properties, asterisks (******) are displayed in the revision comparison report (******).

Accounts to start tasks

You can specify an account under which the task should be run.

For example, to perform an on-demand scan task, you must have access rights to the object being scanned, and to perform an update task, you need authorized proxy server user rights. The capability to specify an account for the task run allows you to avoid problems with on-demand scan tasks and update tasks in case the user running a task does not have the required access rights.

During the execution of remote installation/uninstallation tasks, the specified account is used to download to client devices the files required to install/uninstall an application in case Network Agent is not installed or unavailable. If Network Agent is installed and available, the account is used if in accordance with task settings, file delivery is performed only by using Microsoft Windows utilities from the shared folder. In this case, the account must have the following rights on the device:

• Right to start applications remotely.
• Rights to use the Admin$ resource.
• Right to Log On As Service.

If the files are delivered to devices through Network Agent, the account will not be used. All file copying and installation operations are then performed by the Network Agent (LocalSystem account).

Change Tasks Password Wizard

For a non-local task, you can specify an account under which the task must be run. You can specify the account during task creation or in the properties of an existing task. If the specified account is used in accordance with security instructions of the organization, these instructions might require changing the account password from time to time. When the account password expires and you set a new one, the tasks will not start until you specify the new valid password in the task properties.

The Change Tasks Password Wizard enables you to automatically replace the old password with the new one in all tasks in which the account is specified. Alternatively, you can do it manually in the properties of each task.

To start the Change Tasks Password Wizard:

1. In the console tree, select the Tasks node.
2. In the context menu of the node, select Change Tasks Password Wizard.

Follow the instructions of the Wizard.

Step 1. Specifying credentials

In the Account and Password fields, specify new credentials that are currently valid in your system (for example, in Active Directory). When you switch to the next step of the wizard, Kaspersky Security Center checks if the specified account name matches the account name in the properties of each non-local task. If the account names match, the password in the task properties will be automatically replaced with the new one.

If you fill in the Old password (optional) field, Kaspersky Security Center replaces the password only for those tasks in which both the account name and the old password are found. The replacement is performed automatically. In all other cases you have to choose an action to take in the next step of the wizard.

Step 2. Selecting an action to take

If you have not specified the old password on the first step of the Wizard or the specified old password has not matched the passwords in the tasks, you need to choose an action to take for the found tasks.

For each task that has the Approval required status, decide whether you want to remove the password in the task properties or replace it with the new one. If you choose to remove the password, the task is switched to run under the default account.

Step 3. Viewing the results

On the last step of the Wizard, view the results for each of the found task. To complete the Wizard, click the Finish button.