Pop-up messages about blocked access to devices for users and Local System

Back to "Troubleshooting"

This article concerns:

• Kaspersky Endpoint Security 10 for Windows Service Pack 2 Maintenance Release 4 (version 10.3.3.304)
• Kaspersky Endpoint Security 11.0.1 for Windows (version 11.0.1.90)
• Kaspersky Endpoint Security 11.0.0 for Windows (version 11.0.0.6499)
• Kaspersky Endpoint Security 10 for Windows Service Pack 2 Maintenance Release 3 (version 10.3.3.275)
• Kaspersky Endpoint Security 10 for Windows Service Pack 2 Maintenance Release 2 (version 10.3.0.6294)
• Kaspersky Endpoint Security 10 for Windows Service Pack 2 Maintenance Release 1 (version 10.3.0.6294)
• Kaspersky Endpoint Security 10 for Windows Service Pack 2 (версия 10.3.0.6294)
• Kaspersky Endpoint Security 10 for Windows Service Pack 1 Maintenance Release 4 (version 10.2.6.3733)

When restricting users’ access to removable devices in Kaspersky Endpoint Security 11 for Windows, a pop-up window may appear with a message about blocked access for NT AUTHORITY\System and users.

Cause

An attempt to access a removable device is initiated directly when a user or the operating system (NT AUTHORITY\System) mounts it, ejects it, reads it or writes to it. Numerous events and pop-up windows are generated as a result. 

Access is forbidden to the user NT AUTHORITY\System in Kaspersky Endpoint Security 11 for Windows.

Solution

• Add an allowing rule for the user NT AUTHORITY\System. See the Online Help for instructions.
• Download and install patch PF5040. Pop-up windows and events in reports will be displayed no more than once every 8 hours.

 

Download file

Back to "Troubleshooting"