KIS/KTS can be run well at default settings however the application control tends to be one of the backbone feature if realtime protection capabilities is bypassed then the feature mentioned will be last resort solution and likely not recommended for disabling it.
I think you need to consider straightforward install and forget settings like Norton Internet Security.
I agree with
@jamescv7, but would just add this...
Kaspersky's Trusted Application Mode (TAM) at maximum settings will protect the system.
Technical infos:
Basically,
Trusted Application Mode performs a system scan and, after a user review of the scan results, "white-lists" (= Allows) only those applications and scripts on the system that are included in the Kaspersky databases or approved by the user. Any unknown files are by default blocked from start-up unless the user creates an exception allowing the file to run. In other words, TAM "black-lists" all unknown files except unrecognized system critical files (which require user verification and permission to run).
For best security...
The Trusted Application Mode scan must be run on a clean\dis-infected system.
- The user must carefully review the TAM scan results to confirm no unwanted\malicious files\scripts are allowed on system.
- User must configure Application Control, after the TAM scan, with the following settings:
- Automatically move unknown applications to "Untrusted."
- Dis-able "Trust digitally singed applications."
- Dis-able "Load rules for applications from Kaspersky Security Network (KSN)."
System "Lock-Down":
Using the above settings will block the installation\execution of
any file\script - Trusted, Untrusted and Unknown. The above settings "lock-down" the system. Password protect Kaspersky and no user can install anything except the Kaspersky Administrator.
For best protection, it is recommended that the user completely finalize the custom configuration of their system prior to enabling Trusted Application Mode using maximum settings.
To Install Trustworthy Applications while Trusted Application Mode is Enabled:
To install an application from a well-known, reputable software vendor, enable "Load application rules from Kaspersky Security Network (KSN)." Install the application. Open the app's interface and thoroughly review its functionality and configure its settings and enable components. This step is necessary to activate any modules not automatically loaded during initial installation and, most importantly, permits Kaspersky to create rules for those modules. When finished close the app, then
re-disable the "Load application rules from Security Network (KSN)."