User's Manual

Understanding Kaspersky Administration Kit 17
2.1.7. Relationship between the policies
and the local application settings
Using policies for all computers included into a group, you can set same values
for the application's operating settings.
Values of the settings set by a policy can be redefined for individual computers in
a group using local application's settings. However, you can set values only for
those settings changes to which are not prohibited by the policy: that is their
settings should not be "locked".
Which value will be used on the client computer (see Figure 2) is determined by
whether the setting is "locked" by the policy.
• if any changes to a setting are prohibited, all client computers will use the
same value specified in the policy;
• if changes to a setting are allowed, then each client computer uses a lo-
cal value of the settings rather than the value specified in the policy. In
this case the value of the setting can be changed via the local application
settings.
Thus, when a task is being executed on a client computer, the application will
use values determined by:
• task settings and local application settings if the policy did not prohibit
changes to this setting;
• a group policy, if the policy did not prohibit changes to this setting.
Figure 2. Policy and local application settings